ytstealer | 144a51e08052b7836cfea9fd04fae1d9d3fd8c60708e16e695afd74934e7f02f | Triage

Submit
Reports

Overview

overview

Static

static

8

winprofile

windows7-x64

winprofile

windows10-1703-x64

Sharing

General

Target

144a51e08052b7836cfea9fd04fae1d9d3fd8c60708e16e695afd74934e7f02f
Size

4.0MB
Sample

220830-bnle5safh2
MD5

ed14330e544d855e7ff1607ac144835d
SHA1

139ecf44ebbe6c6933b8031ec74dd14dde5395f6
SHA256

144a51e08052b7836cfea9fd04fae1d9d3fd8c60708e16e695afd74934e7f02f
SHA512

af604f96b5ec2c1dd1d3c51457e8ba4a6df3a146ed15ed88dd5b88971f92f4e445b925cb91881f8c85b189cfa369cde105b4e9bf6b9e2f20c491ce103fe02065
SSDEEP

98304:3Bl1tdaJJHxkJ2TNNsAbQNqkSfIYN7/pFDnvsLl0d:xl1tda/+J2TNJbQUfIMlvsGd

Score

10^/10

ytstealer spyware stealer upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

144a51e08052b7836cfea9fd04fae1d9d3fd8c60708e16e695afd74934e7f02f.exe

Resource

win7-20220812-en

ytstealer spyware stealer upx

windows7-x64

7 signatures

300 seconds

Behavioral task

behavioral2

Sample

144a51e08052b7836cfea9fd04fae1d9d3fd8c60708e16e695afd74934e7f02f.exe

Resource

win10-20220812-en

ytstealer spyware stealer upx

windows10-1703-x64

6 signatures

300 seconds

Malware Config

Targets

- Target
  
  144a51e08052b7836cfea9fd04fae1d9d3fd8c60708e16e695afd74934e7f02f
- Size
  
  4.0MB
- MD5
  
  ed14330e544d855e7ff1607ac144835d
- SHA1
  
  139ecf44ebbe6c6933b8031ec74dd14dde5395f6
- SHA256
  
  144a51e08052b7836cfea9fd04fae1d9d3fd8c60708e16e695afd74934e7f02f
- SHA512
  
  af604f96b5ec2c1dd1d3c51457e8ba4a6df3a146ed15ed88dd5b88971f92f4e445b925cb91881f8c85b189cfa369cde105b4e9bf6b9e2f20c491ce103fe02065
- SSDEEP
  
  98304:3Bl1tdaJJHxkJ2TNNsAbQNqkSfIYN7/pFDnvsLl0d:xl1tda/+J2TNJbQUfIMlvsGd
Score

10^/10

ytstealer spyware stealer upx
- YTStealer
  YTStealer is a malware designed to steal YouTube authentication cookies.
  stealer ytstealer
- YTStealer payload
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Deletes itself
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

ytstealerspywarestealerupx

behavioral2

ytstealerspywarestealerupx

© 2018-2024

Terms | Privacy