601a5853fbe96c1d11fec29a95dc9efcef2f457a8915e183c789f71848786bfc | Triage

Submit
Reports

Overview

overview

3

Static

static

3

Yeis 1.5.rar

windows7-x64

1

Yeis 1.5.rar

windows10-2004-x64

1

Yeis 1.5/Guna.UI2.dll

windows7-x64

1

Yeis 1.5/Guna.UI2.dll

windows10-2004-x64

1

Yeis 1.5/M...s.json

windows7-x64

3

Yeis 1.5/M...s.json

windows10-2004-x64

3

Yeis 1.5/Memory.dll

windows7-x64

1

Yeis 1.5/Memory.dll

windows10-2004-x64

1

Yeis 1.5/M....nupkg

windows7-x64

3

Yeis 1.5/M....nupkg

windows10-2004-x64

3

Yeis 1.5/Memory.pdb

windows7-x64

3

Yeis 1.5/Memory.pdb

windows10-2004-x64

3

Yeis 1.5/Memory.xml

windows7-x64

3

Yeis 1.5/Memory.xml

windows10-2004-x64

1

Yeis 1.5/N...on.dll

windows7-x64

1

Yeis 1.5/N...on.dll

windows10-2004-x64

1

Yeis 1.5/N...on.xml

windows7-x64

3

Yeis 1.5/N...on.xml

windows10-2004-x64

1

Yeis 1.5/Yeis.exe

windows7-x64

1

Yeis 1.5/Yeis.exe

windows10-2004-x64

1

Yeis 1.5/e...config

windows7-x64

3

Yeis 1.5/e...config

windows10-2004-x64

3

Yeis 1.5/e...pp.pdb

windows7-x64

3

Yeis 1.5/e...pp.pdb

windows10-2004-x64

3

Resubmissions

19/11/2024, 15:13

241119-slznesybpk 3

19/11/2024, 15:10

241119-ska9faxelg 3

19/11/2024, 15:07

241119-shdxjsxeke 3

Analysis

max time kernel
149s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
19/11/2024, 15:07

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Yeis 1.5.rar

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

Yeis 1.5.rar

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

Yeis 1.5/Guna.UI2.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Yeis 1.5/Guna.UI2.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Yeis 1.5/Memory.deps.json

Resource

win7-20241010-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral6

Sample

Yeis 1.5/Memory.deps.json

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

Yeis 1.5/Memory.dll

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Yeis 1.5/Memory.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Yeis 1.5/Memory.dll.x64.1.2.27.nupkg

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral10

Sample

Yeis 1.5/Memory.dll.x64.1.2.27.nupkg

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

Yeis 1.5/Memory.pdb

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral12

Sample

Yeis 1.5/Memory.pdb

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

Yeis 1.5/Memory.xml

Resource

win7-20240903-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

Yeis 1.5/Memory.xml

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Yeis 1.5/Newtonsoft.Json.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Yeis 1.5/Newtonsoft.Json.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Yeis 1.5/Newtonsoft.Json.xml

Resource

win7-20241023-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral18

Sample

Yeis 1.5/Newtonsoft.Json.xml

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Yeis 1.5/Yeis.exe

Resource

win7-20240903-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

Yeis 1.5/Yeis.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

Yeis 1.5/eu4formapp.exe.config

Resource

win7-20240903-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral22

Sample

Yeis 1.5/eu4formapp.exe.config

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

Yeis 1.5/eu4formapp.pdb

Resource

win7-20241010-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral24

Sample

Yeis 1.5/eu4formapp.pdb

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Report Analysis Logs

General

Target

Yeis 1.5/Newtonsoft.Json.xml
Size

696KB
MD5

d398ffe9fdac6a53a8d8bb26f29bbb3c
SHA1

bffceebb85ca40809e8bcf5941571858e0e0cb31
SHA256

79ee87d4ede8783461de05b93379d576f6e8575d4ab49359f15897a854b643c4
SHA512

7db8aac5ff9b7a202a00d8acebce85df14a7af76b72480921c96b6e01707416596721afa1fa1a9a0563bf528df3436155abc15687b1fee282f30ddcc0ddb9db7
SSDEEP

6144:XqqU+k/Rik5aG0rH3jGHdl0/IdHXpgVIeR0R+CRFo9TA82m5Kj+sJjoqoyO185QA:DU1

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Yeis 1.5\Newtonsoft.Json.xml"
1⤵
PID:4144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4144-0-0x00007FF8BDBF0000-0x00007FF8BDC00000-memory.dmp

Filesize
64KB

Download
memory/4144-1-0x00007FF8FDC0D000-0x00007FF8FDC0E000-memory.dmp

Filesize
4KB

Download
memory/4144-2-0x00007FF8FDB70000-0x00007FF8FDD65000-memory.dmp

Filesize
2.0MB

Download
memory/4144-3-0x00007FF8FDB70000-0x00007FF8FDD65000-memory.dmp

Filesize
2.0MB

Download

© 2018-2025

Terms | Privacy