Analysis
- user interaction
yes - max time kernel
148s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/08/2026, 04:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
YmmiaV2.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
YmmiaV2.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
YmmiaV2.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
YmmiaV2.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target YmmiaV2.exe
- Size 148KB
- Sample260815-fdlqdaer21
- SHA256 4cfcd9df73030e8d372145a180bccc1bdd8f581cc7baaa54ddb5150a02af8dbc
- MD5 c2a8838b8a8e5c9f927122ad96bc8a6c
- SHA1 15a8c0170e1c1e993c187135b4c556b0835c26d3
- SHA512 c8a33b925bd9815238d32f6d506eae3d0f80433b2d18d2caa5b85572c37f50541a12588988ba15e45635d8c510dbb7cc99662f438d17e4431ad0361a91956f09
- SSDEEP 1536:t9YXnq9YamgiYSoGR6+k84vKqIzjiCBs86Q6LRwqzm4XqIY01NTJZ2bo+W26mCIF:8qvmgiYSo4k8uIPzlSRwa/5B26mCIgm
- TLSH T155E33B07E6A851BEE1B7C679CD924C41FB7378594B71A7CF07504AB60E63AD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 3788 YmmiaV2.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3788 YmmiaV2.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3788 YmmiaV2.exe 3788 YmmiaV2.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\YmmiaV2.exe"C:\Users\Admin\AppData\Local\Temp\YmmiaV2.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:3788
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:2184