Overview
overview
6Static
static
3DirectML.dll
windows10-ltsc_2021-x64
1DirectML.dll
windows11-21h2-x64
1YmmiaV2.exe
windows10-ltsc_2021-x64
1YmmiaV2.exe
windows11-21h2-x64
1YmmiaV2.exe
windows10-ltsc_2021-x64
6YmmiaV2.exe
windows11-21h2-x64
1onnxruntime.dll
windows10-ltsc_2021-x64
1onnxruntime.dll
windows11-21h2-x64
1onnxruntim...ed.dll
windows10-ltsc_2021-x64
1onnxruntim...ed.dll
windows11-21h2-x64
1runtimes/b...eb.dll
windows10-ltsc_2021-x64
1runtimes/b...eb.dll
windows11-21h2-x64
1runtimes/w...me.dll
windows10-ltsc_2021-x64
1runtimes/w...me.dll
windows11-21h2-x64
1runtimes/w...ed.dll
windows10-ltsc_2021-x64
1runtimes/w...ed.dll
windows11-21h2-x64
1runtimes/w...me.dll
windows10-ltsc_2021-x64
1runtimes/w...me.dll
windows11-21h2-x64
1runtimes/w...ed.dll
windows10-ltsc_2021-x64
1runtimes/w...ed.dll
windows11-21h2-x64
1runtimes/w...nt.dll
windows10-ltsc_2021-x64
1runtimes/w...nt.dll
windows11-21h2-x64
1Analysis
- user interaction
yes - max time kernel
150s - max time network
138s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
04/08/2026, 22:27
Static task
static1
Behavioral task
behavioral1
Sample
DirectML.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
Behavioral task
behavioral2
Sample
DirectML.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
YmmiaV2.exe
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
Behavioral task
behavioral4
Sample
YmmiaV2.exe
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral5
Sample
YmmiaV2.exe
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
Behavioral task
behavioral6
Sample
YmmiaV2.exe
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral7
Sample
onnxruntime.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
Behavioral task
behavioral8
Sample
onnxruntime.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral9
Sample
onnxruntime_providers_shared.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
Behavioral task
behavioral10
Sample
onnxruntime_providers_shared.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral11
Sample
runtimes/browser/lib/net8.0/System.Text.Encodings.Web.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
Behavioral task
behavioral12
Sample
runtimes/browser/lib/net8.0/System.Text.Encodings.Web.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral13
Sample
runtimes/win-arm64/native/onnxruntime.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
Behavioral task
behavioral14
Sample
runtimes/win-arm64/native/onnxruntime.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral15
Sample
runtimes/win-arm64/native/onnxruntime_providers_shared.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
Behavioral task
behavioral16
Sample
runtimes/win-arm64/native/onnxruntime_providers_shared.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral17
Sample
runtimes/win-x64/native/onnxruntime.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
Behavioral task
behavioral18
Sample
runtimes/win-x64/native/onnxruntime.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral19
Sample
runtimes/win-x64/native/onnxruntime_providers_shared.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
Behavioral task
behavioral20
Sample
runtimes/win-x64/native/onnxruntime_providers_shared.dll
Resource
win11-20260513-en
windows11-21h2-x64
Behavioral task
behavioral21
Sample
runtimes/win/lib/net8.0/System.Management.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
Behavioral task
behavioral22
Sample
runtimes/win/lib/net8.0/System.Management.dll
Resource
win11-20260513-en
windows11-21h2-x64
General
- Target YmmiaV2.exe
- Size 148KB
- Sample260804-2ddwes1hrd
- SHA256 4cfcd9df73030e8d372145a180bccc1bdd8f581cc7baaa54ddb5150a02af8dbc
- MD5 c2a8838b8a8e5c9f927122ad96bc8a6c
- SHA1 15a8c0170e1c1e993c187135b4c556b0835c26d3
- SHA512 c8a33b925bd9815238d32f6d506eae3d0f80433b2d18d2caa5b85572c37f50541a12588988ba15e45635d8c510dbb7cc99662f438d17e4431ad0361a91956f09
- SSDEEP 1536:t9YXnq9YamgiYSoGR6+k84vKqIzjiCBs86Q6LRwqzm4XqIY01NTJZ2bo+W26mCIF:8qvmgiYSo4k8uIPzlSRwa/5B26mCIgm
- TLSH T155E33B07E6A851BEE1B7C679CD924C41FB7378594B71A7CF07504AB60E63AD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\A: YmmiaV2.exe File opened (read-only) \??\D: YmmiaV2.exe File opened (read-only) \??\H: YmmiaV2.exe File opened (read-only) \??\S: YmmiaV2.exe File opened (read-only) \??\T: YmmiaV2.exe File opened (read-only) \??\B: YmmiaV2.exe File opened (read-only) \??\G: YmmiaV2.exe File opened (read-only) \??\J: YmmiaV2.exe File opened (read-only) \??\O: YmmiaV2.exe File opened (read-only) \??\Q: YmmiaV2.exe File opened (read-only) \??\U: YmmiaV2.exe File opened (read-only) \??\V: YmmiaV2.exe File opened (read-only) \??\I: YmmiaV2.exe File opened (read-only) \??\L: YmmiaV2.exe File opened (read-only) \??\M: YmmiaV2.exe File opened (read-only) \??\P: YmmiaV2.exe File opened (read-only) \??\R: YmmiaV2.exe File opened (read-only) \??\W: YmmiaV2.exe File opened (read-only) \??\Y: YmmiaV2.exe File opened (read-only) \??\K: YmmiaV2.exe File opened (read-only) \??\N: YmmiaV2.exe File opened (read-only) \??\X: YmmiaV2.exe File opened (read-only) \??\Z: YmmiaV2.exe - Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeDebugPrivilege 1716 YmmiaV2.exe Token: SeShutdownPrivilege 1716 YmmiaV2.exe Token: SeCreatePagefilePrivilege 1716 YmmiaV2.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1716 YmmiaV2.exe 1716 YmmiaV2.exe