Resubmissions
19/11/2024, 15:13
241119-slznesybpk 319/11/2024, 15:10
241119-ska9faxelg 319/11/2024, 15:07
241119-shdxjsxeke 3Analysis
-
max time kernel
161s -
max time network
207s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 15:07
General
-
Target
Yeis 1.5/Yeis.exe
-
Size
2.2MB
-
MD5
33cbdfc88d99e1d20de14933660f2449
-
SHA1
35827624d55eccdd0f9f09b8fe503518090362f9
-
SHA256
7c1530177dbeafbef2434fcd6360215b4bef416c197ca951f220d5d0f713647f
-
SHA512
348f1f9d23d5a1d2a82b6fa40780e927a3c98541f2d39cfb2cf39d3c63dbf82cdb3ac9b33a290f06daed9a9d1a298bd8fa66ee85c13c643cb185a4590894725b
-
SSDEEP
49152:7iU1k14aizzUhMkqMWvlLls5sH3+FDnEHFmkwbvf9b4:OUqVfiK5sHug6fS
Score
1/10
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: EnumeratesProcesses 8 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Yeis 1.5\Yeis.exe"C:\Users\Admin\AppData\Local\Temp\Yeis 1.5\Yeis.exe"1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
2.2MB
-
Filesize
2.1MB
-
Filesize
72KB
-
Filesize
10.8MB
-
Filesize
2.1MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
712KB
-
Filesize
136KB
-
Filesize
240KB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
72KB
-
Filesize
104KB
-
Filesize
10.8MB