Analysis
-
max time kernel
133s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
16/04/2023, 19:12
General
-
Target
Yagami 1.0/Yagami.exe
-
Size
2.4MB
-
MD5
952d820b9c648d4e7a70e4ae78701e4d
-
SHA1
743693a3e7a6faa524438ce4ecab4bb424e54dfc
-
SHA256
86314f1b1004e693ef2d1bbdb399fa9410f56d9daf68a77ae72d1b50f84a9f6c
-
SHA512
91f55efa7a4215a58f78265212365f551d5329bfcf095e3512dbf1aa08ae380f5f2ab4144c4d9c2a08905a7ca3e9ad563230f6c144d853cbaa7ea3ba1f8324fd
-
SSDEEP
49152:D89Sti9ZmME9zD0fx/ZZWGNh8bu3kR6Zj2G2mfFtjd4qwp14m8P4LHLKrCczISJ3:D8EME930fxRZWymbuURGz2mfFtjKqwpo
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Yagami 1.0\Yagami.exe"C:\Users\Admin\AppData\Local\Temp\Yagami 1.0\Yagami.exe"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x5581⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.1MB
-
Filesize
6.1MB
-
Filesize
2.5MB
-
Filesize
5.8MB
-
Filesize
144KB
-
Filesize
108KB
-
Filesize
1.5MB
-
Filesize
6.0MB
-
Filesize
1008KB
-
Filesize
1.8MB
-
Filesize
6.1MB
-
Filesize
380KB
-
Filesize
1.7MB
-
Filesize
276KB
-
Filesize
2.5MB
-
Filesize
5.8MB
-
Filesize
144KB
-
Filesize
108KB
-
Filesize
6.0MB
-
Filesize
6.1MB
-
Filesize
380KB
-
Filesize
1.7MB
-
Filesize
6.0MB