a8ff37872c650fd6590c9c42990dae0664efa2660e482a7f872e9ed871b5048f

Analysis

max time kernel
132s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
02-06-2024 08:29

Target

a8ff37872c650fd6590c9c42990dae0664efa2660e482a7f872e9ed871b5048f.exe
Size

1.7MB
MD5

cf4c4648656cb64e0d5e00c159cf3f06
SHA1

aa594e004d7958bce79ba05e4b667e78388f8ac2
SHA256

a8ff37872c650fd6590c9c42990dae0664efa2660e482a7f872e9ed871b5048f
SHA512

ad03fa35ecddbea5b752f9e441108d5d6e363a96e2b51ac5292793ef709f28bc26041f8bc868475ee7a4d20a3d850b4cf02e60dcf51954c578fe03f6a33b08ce
SSDEEP

49152:6PacL+IORPesh/7mmImYrjrpXd9PcikVlLGWUdWPBu:lcLPOZeYT3ZaHm1yWU0P8

Score

4^/10

Drops file in Program Files directory 7 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Y2mate\Y2mate Downloader	a8ff37872c650fd6590c9c42990dae0664efa2660e482a7f872e9ed871b5048f.exe
File created	C:\Program Files\Y2mate\Y2mate Downloader\__tmp_rar_sfx_access_check_240599281	a8ff37872c650fd6590c9c42990dae0664efa2660e482a7f872e9ed871b5048f.exe
File created	C:\Program Files\Y2mate\Y2mate Downloader\PYG64.dll	a8ff37872c650fd6590c9c42990dae0664efa2660e482a7f872e9ed871b5048f.exe
File opened for modification	C:\Program Files\Y2mate\Y2mate Downloader\PYG64.dll	a8ff37872c650fd6590c9c42990dae0664efa2660e482a7f872e9ed871b5048f.exe
File created	C:\Program Files\Y2mate\Y2mate Downloader\uxtheme.dll	a8ff37872c650fd6590c9c42990dae0664efa2660e482a7f872e9ed871b5048f.exe
File opened for modification	C:\Program Files\Y2mate\Y2mate Downloader\uxtheme.dll	a8ff37872c650fd6590c9c42990dae0664efa2660e482a7f872e9ed871b5048f.exe
File opened for modification	C:\Program Files\Y2mate	a8ff37872c650fd6590c9c42990dae0664efa2660e482a7f872e9ed871b5048f.exe

C:\Users\Admin\AppData\Local\Temp\a8ff37872c650fd6590c9c42990dae0664efa2660e482a7f872e9ed871b5048f.exe
"C:\Users\Admin\AppData\Local\Temp\a8ff37872c650fd6590c9c42990dae0664efa2660e482a7f872e9ed871b5048f.exe"
1⤵
- Drops file in Program Files directory
PID:2248