General
- Target yuzu_install.exe
- Size 10.3MB
- Sample260623-26fkqagy9j
- SHA256 9e894c2620d565949e0d71e181e780ddaccc5b0d2fd70ec674e913ac7549fdcf
- MD5 d51d1d2718e3b9eb5651398e61d74327
- SHA1 296f84b6c276fe9e91651336de83d3377ffa147b
- SHA512 a5cb4c437ec8a6a7b036c5e4acd9317b5348851b867069e5da0cc1e887a6b29e33e4d0f6c34a55ed1fc9786bd03a6ae39c95df3ae5f0eb41ab66972d38400063
- SSDEEP 98304:9Ap0k+ZEtzkBIDW3TFCdsnCDyXOJWvO1pD5i4By2moI3YxkTN1JItXiy+HD:9w3dtDW30jygH7i4fI3YxkZqLy
- TLSH T1CDB6BF01BB9A1DE7D35AC874C3865392173274D74726B6ABA1C650283FAF7B40F2A71C
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
yuzu_install.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
yuzu_install.exe
Resource
win11ltsc2024-20260618-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target yuzu_install.exe
- Size 10.3MB
- SHA256 9e894c2620d565949e0d71e181e780ddaccc5b0d2fd70ec674e913ac7549fdcf
- MD5 d51d1d2718e3b9eb5651398e61d74327
- SHA1 296f84b6c276fe9e91651336de83d3377ffa147b
- SHA512 a5cb4c437ec8a6a7b036c5e4acd9317b5348851b867069e5da0cc1e887a6b29e33e4d0f6c34a55ed1fc9786bd03a6ae39c95df3ae5f0eb41ab66972d38400063
- SSDEEP 98304:9Ap0k+ZEtzkBIDW3TFCdsnCDyXOJWvO1pD5i4By2moI3YxkTN1JItXiy+HD:9w3dtDW30jygH7i4fI3YxkZqLy
- TLSH T1CDB6BF01BB9A1DE7D35AC874C3865392173274D74726B6ABA1C650283FAF7B40F2A71C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.