Overview

overview

10

Static

static

8

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    48s
  • max time network
    57s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    04-09-2022 15:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    file.exe

  • Size

    4.1MB

  • MD5

    ceef7938f0bf3b59ab2b6d31633529a2

  • SHA1

    c706f701407c878bfd11f53373a698c977fa9013

  • SHA256

    52fbe26c4b9fd1f8fae6d4840ef6741eb6c8bcd4f137f9139ae49b15d1590b20

  • SHA512

    ba14c980658c2974abcdf1188c2a26baf2d46ef4637e5abf49f48a4f88873e855928e89b7b921a3f59e13b71ffd582613e22b21974ec78d8c70f1fb959eb18b2

  • SSDEEP

    98304:fVoXSjNPl7AYbFijNQB3fYIkyHf3QxYbXDkMau10iW:NoXSjNt7d2WvFHf3Q27DkMaiW

Score
10/10
ytstealerstealerupx

Malware Config

Signatures

  • YTStealer

    YTStealer is a malware designed to steal YouTube authentication cookies.

    stealerytstealer
  • YTStealer payload 2 IoCs
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\file.exe
    "C:\Users\Admin\AppData\Local\Temp\file.exe"
    1⤵
      PID:1536

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1536-54-0x0000000000EF0000-0x0000000001D15000-memory.dmp
      Filesize

      14.1MB

      Download
    • memory/1536-55-0x0000000000EF0000-0x0000000001D15000-memory.dmp
      Filesize

      14.1MB

      Download