General
- Target YT3VM.exe
- Size 135KB
- Sample260730-lm5shaywe1
- SHA256 3761af7469be90045016a39093cd97395f081af21a91d6ebe5dbcd86072e9b64
- MD5 95a0b36f7e95680a46713907bace8bee
- SHA1 f024d4f1a5a43c1ab110f92e372628e229a319ce
- SHA512 55e2e749f96eb2f265cfc8eeecea85907eb8e8f984c9549b6bb7e5b3c25fe24d7bddb761596a1f4789d8742ac20c44f775dd32c604c6803d2ac009e7b3a39d6a
- SSDEEP 3072:7ZuIedU5pnDpcUpXKaI1nE3Ss7UMw7BlPmHiZkOMDe3fKZL0XZ+SygvVeSKN5UT:9uIP1qnrMDUiZL0XZ+ScLU
- TLSH T1E6D34915BB9009EEE8A9013A68730FC4E6F4F9C4C61B934AA7F75CBA6BB3355C0512D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
YT3VM.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
YT3VM.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target YT3VM.exe
- Size 135KB
- SHA256 3761af7469be90045016a39093cd97395f081af21a91d6ebe5dbcd86072e9b64
- MD5 95a0b36f7e95680a46713907bace8bee
- SHA1 f024d4f1a5a43c1ab110f92e372628e229a319ce
- SHA512 55e2e749f96eb2f265cfc8eeecea85907eb8e8f984c9549b6bb7e5b3c25fe24d7bddb761596a1f4789d8742ac20c44f775dd32c604c6803d2ac009e7b3a39d6a
- SSDEEP 3072:7ZuIedU5pnDpcUpXKaI1nE3Ss7UMw7BlPmHiZkOMDe3fKZL0XZ+SygvVeSKN5UT:9uIP1qnrMDUiZL0XZ+ScLU
- TLSH T1E6D34915BB9009EEE8A9013A68730FC4E6F4F9C4C61B934AA7F75CBA6BB3355C0512D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (152) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.