1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e

Analysis

max time kernel
149s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
21/04/2026, 04:36

Target
1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e.exe
Size 4.3MB
Sample260421-e8m19ahx3j
SHA256 1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e
MD5 ee4ae3f992c94e1574ed00a1ba28b324
SHA1 a8085fcfdffcda951365aeee9180f9636525fd25
SHA512 bc4f52b9f72351632bf375cdb59b38e434137e62a99859d02ad7aa15a20bf5fb721b81d4bc3be4d37b29608e20378bb2445d4f5e444408818cb0de6bae95fefa
SSDEEP 49152:35xoFaj9KHZnLNPAuhu5HLVI1+YWubgNCfD0oGEntBbqHuLEMQYeha/DzZRNd0M:3cDWRcqOff
TLSH
T1B7263A53E26611E8C41EC9B4CF1D552296297C4E47F193EF29E876E11A72EC83B3DB20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Drops file in Program Files directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\yandex_browser_service_update.log	1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e.exe
File opened for modification	C:\Program Files\yandex_browser_service_update.log	1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4712 wrote to memory of 5324	4712	1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e.exe	84

C:\Users\Admin\AppData\Local\Temp\1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e.exe
"C:\Users\Admin\AppData\Local\Temp\1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e.exe"
1⤵
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
PID:4712
- C:\Users\Admin\AppData\Local\Temp\1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e.exe
  "C:\Users\Admin\AppData\Local\Temp\1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e.exe" --statistics=https://api.browser.yandex.ru/installstats/send/dtype=stred/pid=457/cid=72992/path=extended_stat/vars=-action=service_unused,-brand_id=unknown,-error=UNKNOWN_COMMAND,-installer_type=service,-launched=false,-old_style=1,-old_ver=,-result=0,-stage=error,-ui=B1337238_4792_45E5_8EBD_FBF3BC93AD5B/*
  2⤵
  - Drops file in Program Files directory
  PID:5324

yandex_browser_service_update.log

Path C:\Program Files\yandex_browser_service_update.log
Size 4KB
SHA256 c680b697a344ccea248b4bd99283aa25c489633b20e3139caa8840e2977ac8be
MD5 d28d29c062c09abd6ef27bc483cb6e5f
SHA1 e2a3584e3b1ea1375e9a1ebd1e0ce71aadc52263
SHA512 1d413aab2660be7f8989e2b2f6681183a7cd26ba42d3536f8a7020231cf9da0bfd7d5033a9347b4c11d3a87db2ad85b8cb1587d6fe10bf79a5a198c06d4374db
SSDEEP 96:KrHq4Hj38pQD5DwX8OtdW2WFyfIRoVe8T+0/pouxCMr+0/pouxzHS4HuhzpT2r+r:uMe98sRbRghVLxCMtLxspitLxY6VLxwl
TLSH
T1B2B141ECAEE4A5F57A1C02C7D6665EF20F0431447F18C9B0AAFD91D80853846BDBF159
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

yandex_browser_service_update.log

Path C:\Program Files\yandex_browser_service_update.log
Size 3KB
SHA256 143a08c856f86b751b3e5d354f824532940570a3bc4645fa36acb1ad29b0d602
MD5 2927ef132cb2b014254327a85d6957d4
SHA1 f4c224fc333f5cffbf8b06b41cc17654939508f3
SHA512 defb1cf1862547f4909f6bd292bab85739967c4f3d272c2836c14b40e559ba2c4e58eabed2b5cf24c34e53af7e0d21216328adc59abd742e601fee47d27e3f30
TLSH
T19171ECECAEE4A5B53A6C02C7D6624BF30F0072843F1C8AB056ED91941993846BEBF119
MD5 SHA1 SHA512 TLSH

Submit Download