1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e

Analysis

max time kernel
149s
max time network
153s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
21/04/2026, 04:36

Target
1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e.exe
Size 4.3MB
Sample260421-e8m19ahx3j
SHA256 1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e
MD5 ee4ae3f992c94e1574ed00a1ba28b324
SHA1 a8085fcfdffcda951365aeee9180f9636525fd25
SHA512 bc4f52b9f72351632bf375cdb59b38e434137e62a99859d02ad7aa15a20bf5fb721b81d4bc3be4d37b29608e20378bb2445d4f5e444408818cb0de6bae95fefa
SSDEEP 49152:35xoFaj9KHZnLNPAuhu5HLVI1+YWubgNCfD0oGEntBbqHuLEMQYeha/DzZRNd0M:3cDWRcqOff
TLSH
T1B7263A53E26611E8C41EC9B4CF1D552296297C4E47F193EF29E876E11A72EC83B3DB20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Drops file in Windows directory 4 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e.exe
File opened for modification	C:\Windows\SystemTemp\yandex_browser_service_update.log	1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e.exe
File opened for modification	C:\Windows\SystemTemp	1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e.exe
File opened for modification	C:\Windows\SystemTemp\yandex_browser_service_update.log	1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3024 wrote to memory of 3552	3024	1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e.exe	79

C:\Users\Admin\AppData\Local\Temp\1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e.exe
"C:\Users\Admin\AppData\Local\Temp\1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e.exe"
1⤵
- Drops file in Windows directory
- Suspicious use of WriteProcessMemory
PID:3024
- C:\Users\Admin\AppData\Local\Temp\1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e.exe
  "C:\Users\Admin\AppData\Local\Temp\1dd9d6caf751f962bc77341607883797f96e7395f14fa0b20681980c2abc676e.exe" --statistics=https://api.browser.yandex.ru/installstats/send/dtype=stred/pid=457/cid=72992/path=extended_stat/vars=-action=service_unused,-brand_id=unknown,-error=UNKNOWN_COMMAND,-installer_type=service,-launched=false,-old_style=1,-old_ver=,-result=0,-stage=error,-ui=EB3FEBF6_AC0C_4789_87F9_5E6F93F1DDD5/*
  2⤵
  - Drops file in Windows directory
  PID:3552

yandex_browser_service_update.log

Path C:\Windows\SystemTemp\yandex_browser_service_update.log
Size 3KB
SHA256 5d5ca697d2051c57a38c53f25e09fa22f1e4213067bbc2f2e966f973aad144b2
MD5 808a9f0f2f719ac6d28033787ad193c9
SHA1 6c4e608dcf73b9c1145fd44b20ced30b7b6271a7
SHA512 f808c4293dfb0a508b5ad29a2f44a72eaae4910744d6271ceea6996b070a1b1d48efc7a52cfd9f06d47da9423c0de76cb898f75a79820556edd6c3e50226c371
TLSH
T19F71FD9C09F8817EBA3C52D7DB130EF21F4071046B1C86716AEAA0C429938577FFE265
MD5 SHA1 SHA512 TLSH

Submit Download

yandex_browser_service_update.log

Path C:\Windows\SystemTemp\yandex_browser_service_update.log
Size 4KB
SHA256 ba3acf6ac043fbcda86e361d60af3c17ad0eaa4c1fc87b2b28cb1b3b89e4b990
MD5 5cff137f23e036b6b78a7085b8a9895e
SHA1 c445bf4b242149427d4f81b1cd9d1dd869e8202a
SHA512 352c925ba019dee59c48faf38d859ecb6e5930e89190b273eb5355dee7b5b1cf746ed4f4ae032151ce64048b697d5506eb08aa9bd74ed53e5c30317f7956c5b0
SSDEEP 96:KOHX4HM8GQ85Zw+8OtdW24UpcIhVe8T+0/po8v+0/poFHD4HfVpZ+0/poAHF8T+m:+XqCBRmHhVRh5pb4Vrf
TLSH
T18CA1109C49E4417EB92C52DBEB171EF21F4070046B5889706AEEA0C42882857BFFF365
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

yandex_browser_service_update.log

Path C:\Windows\SystemTemp\yandex_browser_service_update.log
Size 2KB
SHA256 20e084317b32189c729c87184a4a3c3fa5963417c357475074c54a4871d3d3d3
MD5 4d8a537bc34b1378929b58b36661d0a8
SHA1 3ffac05419c5d0f12d4c6a82c8bd007e46d6860c
SHA512 80f8be59a4267dfee14994beb63a07cf951db837769125ba6da73d7f4acf4a1c1f8963a268c0e2ddfa0bab8e95dfa070715f1caf78dbca40b757adc23f133622
TLSH
T11551BA9C49F8817EBA3C92D7DB520AF21F4071446B1C86716AEAA0C425938577FFF225
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3552-24-0x000001DC48920000-0x000001DC489CF000-memory.dmp

Download

memory/3552-28-0x000001DC48920000-0x000001DC489CF000-memory.dmp

Download