0a7262931f2d5ea24e06a0e66bd0545224caa2be5350b234b464f088776a1bbf

Analysis

user interaction
yes
max time kernel
36s
max time network
34s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/07/2026, 04:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
YBClicker.build.exe
Size 3.6MB
Sample260709-fdmbxacw7m
SHA256 0a7262931f2d5ea24e06a0e66bd0545224caa2be5350b234b464f088776a1bbf
MD5 5bacb2fbe4cb389aa61298ca497206b7
SHA1 a90585370f8cac211cf448e11cfcf8464617e934
SHA512 a09a8a0223e4385d83f433499784fbfe40cc7605c8faa17b9ba2713309d6b8e67d6285e09221395a789e4c11a36985bbdb397386cb5eb001904264f4e13053bd
SSDEEP 49152:gPk93jWqeFocKr7SG1HNAhVw2dvI1mwyHjOg5m1rVwL6xeHqn5EtXbN2cdyu/n:pl0g5tqjwt19yHjOhVlxeHq69V
TLSH
T1CC062391F6D208FAE57BE074C9779845E77238850730E9E7036886A56F2B3E15A3EF01
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	YBClicker.build.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	YBClicker.build.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1372	YBClicker.build.exe

C:\Users\Admin\AppData\Local\Temp\YBClicker.build.exe
"C:\Users\Admin\AppData\Local\Temp\YBClicker.build.exe"
1⤵
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
PID:1372

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

timing-profile.log

Path C:\Users\Admin\AppData\Local\YBClicker\timing-profile.log
Size 459B
SHA256 603f446da871c2e2cddbc8a013fab3e5aa4bad40270f1d2504c046b9a996145e
MD5 2ba44a7677d0f66d0953ac238174e630
SHA1 1e520a64fcb7b2d0d8a2f93b6b760ad16ee8a32b
SHA512 53975fb2539e0b452a80925f744b1f3f5f0c8e787f998dedef0d190ca7f8bfdaad385dee5bb4b5f5083328f1b5b49c2467da6d93f4266486c599be166dd06752
TLSH
T19AF0AC70BAB081B64550C35BEB9DAD2DFAA7FA035244B5807794EA181326C83CDDDCD3
MD5 SHA1 SHA512 TLSH

Submit Download