General
- Target Yim-Menu_v2.exe
- Size 679.0MB
- Sample260620-2zwy5aa12s
- SHA256 5e06af23d64d6f6200c39d63defb950a5e910febab68742a2580628bce1a7b0e
- MD5 d044181365020fba6051ed2e57ecdcb3
- SHA1 b68540ccb0bc2abd5089ed52718ce099da08d6d4
- SHA512 225065f103cb761085daf6dc36f5c132be210ae3585d43dd4538b4502e3570717050b97ec43dcac2a5f49fe9b8b766f459d3d3cfc27186c00404faf5d36103b4
- SSDEEP 49152:12hvRhHuklE07UKNN4p+ZQAEh5fqA70LpzImwqH:SvOH07RIuHETqA70pU0H
- TLSH T1BB790219E7E404FDE1B7E1B8CD874916EB7678490761E6CF03A4A5A21F237908E3DB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Yim-Menu_v2.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
Yim-Menu_v2.exe
Resource
win11ltsc2024-20260617-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Yim-Menu_v2.exe
- Size 679.0MB
- SHA256 5e06af23d64d6f6200c39d63defb950a5e910febab68742a2580628bce1a7b0e
- MD5 d044181365020fba6051ed2e57ecdcb3
- SHA1 b68540ccb0bc2abd5089ed52718ce099da08d6d4
- SHA512 225065f103cb761085daf6dc36f5c132be210ae3585d43dd4538b4502e3570717050b97ec43dcac2a5f49fe9b8b766f459d3d3cfc27186c00404faf5d36103b4
- SSDEEP 49152:12hvRhHuklE07UKNN4p+ZQAEh5fqA70LpzImwqH:SvOH07RIuHETqA70pU0H
- TLSH T1BB790219E7E404FDE1B7E1B8CD874916EB7678490761E6CF03A4A5A21F237908E3DB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE