Analysis

  • user interaction
    yes
  • max time kernel
    61s
  • max time network
    63s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    20/07/2026, 04:36

General

  • Target
    yuukips-launcher.exe
  • Size 9.9MB
  • Sample260720-e8bcfsez3k
  • SHA256 630e1af0ff2eb9e8312733a66519a3f8ca221bb2f91596eb22597084ff55d319
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\yuukips-launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\yuukips-launcher.exe"
    1⤵
    • Checks whether UAC is enabled
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:3396
    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=yuukips-launcher.exe --webview-exe-version=2.0.15 --user-data-dir="C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=3396.3780.4138595399446448442
      2⤵
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of WriteProcessMemory
      PID:1252
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ffe5c56b078,0x7ffe5c56b084,0x7ffe5c56b090
        3⤵
          PID:888
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView" --webview-exe-name=yuukips-launcher.exe --webview-exe-version=2.0.15 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1664,i,6062232462649861626,1613341395719119494,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1692 /prefetch:2
          3⤵
            PID:4688
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView" --webview-exe-name=yuukips-launcher.exe --webview-exe-version=2.0.15 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2004,i,6062232462649861626,1613341395719119494,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2016 /prefetch:11
            3⤵
              PID:2524
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView" --webview-exe-name=yuukips-launcher.exe --webview-exe-version=2.0.15 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1700,i,6062232462649861626,1613341395719119494,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:13
              3⤵
                PID:2452
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView" --webview-exe-name=yuukips-launcher.exe --webview-exe-version=2.0.15 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3512,i,6062232462649861626,1613341395719119494,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
                3⤵
                  PID:4872
              • C:\Windows\system32\reg.exe
                "reg" query "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable
                2⤵
                  PID:3644

              Network

                    MITRE ATT&CK Enterprise v16

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    settings.dat

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Crashpad\settings.dat
                    • Size 280B
                    • SHA256 eb7596fe0a760b415ba73a8a4aa607a27f667a5eac0b40eb5e477f087e1fd30f
                    • MD5 SHA1 SHA512

                    settings.dat

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Crashpad\settings.dat
                    • Size 280B
                    • SHA256 3ec22ccac87d946c0ffce18eaac2dd6e994b54458a93ef7dbdee9305ba1313af
                    • MD5 SHA1 SHA512 TLSH

                    throttle_store.dat

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Crashpad\throttle_store.dat
                    • Size 20B
                    • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                    • MD5 SHA1 SHA512

                    the-real-index

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                    • Size 48B
                    • SHA256 206de68e47efe228bf69a50b626617d347948568bc1b3209c4600eca38b5a1b0
                    • MD5 SHA1 SHA512

                    the-real-index

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                    • Size 72B
                    • SHA256 4566b7ea8203f8a30d702585f4b399fc85c14ff9b8d31b280ba062250ed40e06
                    • MD5 SHA1 SHA512 TLSH

                    index

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Default\DawnGraphiteCache\index
                    • Size 256KB
                    • SHA256 b1ca7bdf53317f5948db64eacd40c8b92cadb4b75fa42f775559ba5c614c5351
                    • MD5 SHA1 SHA512 SSDEEP

                    data_0

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Default\DawnWebGPUCache\data_0
                    • Size 8KB
                    • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                    • MD5 SHA1 SHA512 SSDEEP

                    data_1

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Default\DawnWebGPUCache\data_1
                    • Size 264KB
                    • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                    • MD5 SHA1 SHA512 SSDEEP

                    data_2

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Default\DawnWebGPUCache\data_2
                    • Size 8KB
                    • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                    • MD5 SHA1 SHA512 SSDEEP

                    data_3

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Default\DawnWebGPUCache\data_3
                    • Size 8KB
                    • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                    • MD5 SHA1 SHA512 SSDEEP

                    MANIFEST-000001

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Default\Extension Rules\MANIFEST-000001
                    • Size 41B
                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                    • MD5 SHA1 SHA512

                    SCT Auditing Pending Reports

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Default\Network\SCT Auditing Pending Reports
                    • Size 2B
                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                    • MD5 SHA1 SHA512

                    Preferences

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Default\Preferences
                    • Size 6KB
                    • SHA256 694fbe3d458ae8c5172dd1867e20d0cc5091fb55ebb0157951fbee221b275555
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Preferences~RFe591a25.TMP

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Default\Preferences~RFe591a25.TMP
                    • Size 6KB
                    • SHA256 bde9b187e7bbd990134633a5c787d21b3cf43782ec3898e978095f5667dbf212
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    CURRENT

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Default\Site Characteristics Database\CURRENT
                    • Size 16B
                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                    • MD5 SHA1 SHA512

                    Local State

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Local State
                    • Size 1KB
                    • SHA256 ed8a6c54f0c5676164403177ce87ee41c07d25aa590511f82780b7978421cea9
                    • MD5 SHA1 SHA512 TLSH

                    Local State

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Local State
                    • Size 16KB
                    • SHA256 889d57029f7639331c4e9682bba28ce330cb26ac03ecfcff25db8b747e334786
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Local State

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Local State
                    • Size 2KB
                    • SHA256 4ad1dd949c8cf103ceecfc65758a909f9bd3403e83a8198207b8024471802526
                    • MD5 SHA1 SHA512 TLSH

                    Local State

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Local State
                    • Size 16KB
                    • SHA256 697594ecdfdb062fd98505ff9468cd2e6c035832ae10122578b7b65ad7d0282d
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Local State

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Local State
                    • Size 3KB
                    • SHA256 1438266b7fac0fbc4c6318154cf88277521002185736bd8f1401f16c017d79d0
                    • MD5 SHA1 SHA512 TLSH

                    Local State~RFe587bb3.TMP

                    • Path C:\Users\Admin\AppData\Local\com.yuukips.launcher\EBWebView\Local State~RFe587bb3.TMP
                    • Size 1KB
                    • SHA256 d6cba94c3787d5d9c862b13a9085850afae04a7f198edc2b9a8b8580df3be69a
                    • MD5 SHA1 SHA512 TLSH

                    memory/4688-25-0x00007FFE6A420000-0x00007FFE6A421000-memory.dmp

                    memory/4688-210-0x0000022F3E540000-0x0000022F3E5E3000-memory.dmp

                    memory/4688-250-0x0000022F3E540000-0x0000022F3E5E3000-memory.dmp

                    memory/4872-144-0x00007FFE6A420000-0x00007FFE6A421000-memory.dmp

                    memory/4872-228-0x000002BB4DA40000-0x000002BB4DAE3000-memory.dmp

                    memory/4872-252-0x000002BB4DA40000-0x000002BB4DAE3000-memory.dmp