General
- Target Yjnybr.exe
- Size 321KB
- Sample260703-ppa8fshs5v
- SHA256 5dcd682dee38bcd0b8002a15b0d4627c99d04f33eb2df6a7907c8aad31f34fe3
- MD5 561cfdefda466ee0da5b628039f343f2
- SHA1 bbd9f8ed3e3928cb088732033e76932700844921
- SHA512 56fc04b2781dfcf7a773aa0a96ffce9d0b20b5fbf04080814136ceb98243a52d76cd9c98067e43d12b4fa9fab984a6b8b0408f46fe123c2abcb9355154f0b190
- SSDEEP 6144:RhCgReoxBwarTXCcHTGVMLxu+H6DGWESIt+z8WC3iH:JReTu3TCIyESY+z8WHH
- TLSH T124648D5813ED8A26E6FE62B5E83D040D47F6B51A612EFB4F1A9060FD6C13F8449017BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Yjnybr.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Yjnybr.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Yjnybr.exe
- Size 321KB
- SHA256 5dcd682dee38bcd0b8002a15b0d4627c99d04f33eb2df6a7907c8aad31f34fe3
- MD5 561cfdefda466ee0da5b628039f343f2
- SHA1 bbd9f8ed3e3928cb088732033e76932700844921
- SHA512 56fc04b2781dfcf7a773aa0a96ffce9d0b20b5fbf04080814136ceb98243a52d76cd9c98067e43d12b4fa9fab984a6b8b0408f46fe123c2abcb9355154f0b190
- SSDEEP 6144:RhCgReoxBwarTXCcHTGVMLxu+H6DGWESIt+z8WC3iH:JReTu3TCIyESY+z8WHH
- TLSH T124648D5813ED8A26E6FE62B5E83D040D47F6B51A612EFB4F1A9060FD6C13F8449017BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1