Overview

overview

3

Static

static

3

Ys7 v1.0-v...er.exe

windows7-x64

1

Ys7 v1.0-v...er.exe

windows10-2004-x64

1

游侠网�...��.url

windows7-x64

1

游侠网�...��.url

windows10-2004-x64

1

Analysis

  • max time kernel
    151s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 01:29

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    Ys7 v1.0-v1.02 +21 Trainer.exe

  • Size

    439KB

  • MD5

    a980e31891f56bf66b731667cca627a5

  • SHA1

    4170a7b2c8dfac74aa3949171625ebc09d00bf8a

  • SHA256

    27b38ad061eba56a300dbaeebe7e9aeec1246e52d0000099c1fe4b17177da454

  • SHA512

    496871d809aab88ce1f8d285d47815c23090c1032efb8a5a203fbfb8f152a72ef18e3219732aba1c62fd0719a3d6f74c4794635d47ba4a0d466b25e72137d688

  • SSDEEP

    6144:bMoFkcdR8WNrYDmgaW1+Q/Mzr+7cW1gappqpppupYFpppppApppp3pppPpppp/pY:bMoF/dR8Q8aga6/Or+hKu6+Na

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Ys7 v1.0-v1.02 +21 Trainer.exe
    "C:\Users\Admin\AppData\Local\Temp\Ys7 v1.0-v1.02 +21 Trainer.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2168

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2168-0-0x0000000000400000-0x00000000004C7000-memory.dmp

          Filesize

          796KB

          Download

        • memory/2168-1-0x0000000000020000-0x0000000000023000-memory.dmp

          Filesize

          12KB

          Download

        • memory/2168-2-0x0000000000400000-0x00000000004C7000-memory.dmp

          Filesize

          796KB

          Download

        • memory/2168-4-0x0000000000020000-0x0000000000023000-memory.dmp

          Filesize

          12KB

          Download