Overview

overview

10

Static

static

8

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    4.1MB

  • Sample

    220904-srbhsahgbp

  • MD5

    ceef7938f0bf3b59ab2b6d31633529a2

  • SHA1

    c706f701407c878bfd11f53373a698c977fa9013

  • SHA256

    52fbe26c4b9fd1f8fae6d4840ef6741eb6c8bcd4f137f9139ae49b15d1590b20

  • SHA512

    ba14c980658c2974abcdf1188c2a26baf2d46ef4637e5abf49f48a4f88873e855928e89b7b921a3f59e13b71ffd582613e22b21974ec78d8c70f1fb959eb18b2

  • SSDEEP

    98304:fVoXSjNPl7AYbFijNQB3fYIkyHf3QxYbXDkMau10iW:NoXSjNt7d2WvFHf3Q27DkMaiW

Score
10/10
ytstealerspywarestealerupx

Malware Config

Targets

    • Target

      file.exe

    • Size

      4.1MB

    • MD5

      ceef7938f0bf3b59ab2b6d31633529a2

    • SHA1

      c706f701407c878bfd11f53373a698c977fa9013

    • SHA256

      52fbe26c4b9fd1f8fae6d4840ef6741eb6c8bcd4f137f9139ae49b15d1590b20

    • SHA512

      ba14c980658c2974abcdf1188c2a26baf2d46ef4637e5abf49f48a4f88873e855928e89b7b921a3f59e13b71ffd582613e22b21974ec78d8c70f1fb959eb18b2

    • SSDEEP

      98304:fVoXSjNPl7AYbFijNQB3fYIkyHf3QxYbXDkMau10iW:NoXSjNt7d2WvFHf3Q27DkMaiW

    Score
    10/10
    ytstealerstealerupxspyware

    • YTStealer

      YTStealer is a malware designed to steal YouTube authentication cookies.

      stealerytstealer

    • YTStealer payload

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks