Analysis
- max time kernel
150s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
05/08/2026, 01:04
General
- Target YandereSimulatorLauncher.exe
- Size 4.7MB
- Sample260805-beyn4sgr31
- SHA256 33a3fcb7494e831dc252e1133dd33360e1f452ab7e5b63ec1905ec6fe12dbe02
Malware Config
Signatures
- Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Checks processor information in registry 2 TTPs 4 IoCs
Processor information is often read in order to detect sandboxing environments.
- Modifies registry class 1 IoCs
- Suspicious use of AdjustPrivilegeToken 35 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- System policy modification 1 TTPs 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\YandereSimulatorLauncher.exe"C:\Users\Admin\AppData\Local\Temp\YandereSimulatorLauncher.exe"1⤵
- Enumerates connected drives
- Checks processor information in registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- System policy modification
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
CurrentDatabase_400.wmdb
WMSDKNS.XML
mainpanel-dere.wmv
memory/2560-0-0x00007FF9D75CF000-0x00007FF9D75D0000-memory.dmp
memory/2560-1-0x0000017654710000-0x0000017654BC8000-memory.dmp
memory/2560-2-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-3-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-6-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-7-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-8-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-9-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-17-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-18-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-20-0x0000017670240000-0x000001767024E000-memory.dmp
memory/2560-21-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-19-0x0000017674540000-0x000001767457E000-memory.dmp
memory/2560-22-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-23-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-25-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-26-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-39-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-44-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-50-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-49-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-48-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-47-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-46-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-45-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-43-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-42-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-41-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-40-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-58-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-57-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-55-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-56-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-91-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-96-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-103-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-102-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-101-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-100-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-99-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-98-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-97-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-92-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-90-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-89-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-88-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-87-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-86-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-85-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-84-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-83-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-82-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-95-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-94-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-93-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-81-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-80-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-79-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-78-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-77-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-76-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-75-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-73-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-72-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-71-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-70-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-68-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-67-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-66-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-65-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-64-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-61-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-60-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-59-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-54-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-53-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-74-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-69-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-62-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-63-0x0000017676500000-0x0000017676510000-memory.dmp
memory/2560-144-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-160-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-174-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-202-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-208-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-210-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-212-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-213-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-225-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-226-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-227-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-230-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-231-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-374-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-403-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-464-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-717-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-752-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-794-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-833-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp
memory/2560-845-0x00007FF9D7440000-0x00007FF9D7DE4000-memory.dmp