General
- Target YuriWarnoToolkit.exe
- Size 4.6MB
- Sample260724-av26ssdh56
- SHA256 88be58c8c2d569a3007f327ce02c6e11c73bf1eba759e9c1d83dd0416392f96a
- MD5 a9d9964d23e8543695a7782125b556c2
- SHA1 93d0a802ca7c5fce0d42e3d8aed3572cd5886feb
- SHA512 d1c0b7b893fb2f57bd7b9fcaf1b18eeb33be51a16c439f7b3b8a7675f163a6f69f71138caed991d2179bfd92a3e5f7e07f0097262408491f997b8666f28fff7f
- SSDEEP 49152:hUszg/3sRx2tA7bzvJuAAeX3IdyhCgLrAzd2hRzv1VwFpfkHyNPtZLGcH5KNv88/:hPosn5zQAfnwHhevFwyXB6R7aqG
- TLSH T1352633E43EA7D53BCBDC0734F0849610A7EE8607DD46FB0A456484E40EFA39D8B4666B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
YuriWarnoToolkit.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
YuriWarnoToolkit.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target YuriWarnoToolkit.exe
- Size 4.6MB
- SHA256 88be58c8c2d569a3007f327ce02c6e11c73bf1eba759e9c1d83dd0416392f96a
- MD5 a9d9964d23e8543695a7782125b556c2
- SHA1 93d0a802ca7c5fce0d42e3d8aed3572cd5886feb
- SHA512 d1c0b7b893fb2f57bd7b9fcaf1b18eeb33be51a16c439f7b3b8a7675f163a6f69f71138caed991d2179bfd92a3e5f7e07f0097262408491f997b8666f28fff7f
- SSDEEP 49152:hUszg/3sRx2tA7bzvJuAAeX3IdyhCgLrAzd2hRzv1VwFpfkHyNPtZLGcH5KNv88/:hPosn5zQAfnwHhevFwyXB6R7aqG
- TLSH T1352633E43EA7D53BCBDC0734F0849610A7EE8607DD46FB0A456484E40EFA39D8B4666B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.