0a7262931f2d5ea24e06a0e66bd0545224caa2be5350b234b464f088776a1bbf

Analysis

max time kernel
9s
max time network
11s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 05:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
YBClicker.build.exe
Size 3.6MB
Sample260825-gamc6ss1ey
SHA256 0a7262931f2d5ea24e06a0e66bd0545224caa2be5350b234b464f088776a1bbf
MD5 5bacb2fbe4cb389aa61298ca497206b7
SHA1 a90585370f8cac211cf448e11cfcf8464617e934
SHA512 a09a8a0223e4385d83f433499784fbfe40cc7605c8faa17b9ba2713309d6b8e67d6285e09221395a789e4c11a36985bbdb397386cb5eb001904264f4e13053bd
SSDEEP 49152:gPk93jWqeFocKr7SG1HNAhVw2dvI1mwyHjOg5m1rVwL6xeHqn5EtXbN2cdyu/n:pl0g5tqjwt19yHjOhVlxeHq69V
TLSH
T1CC062391F6D208FAE57BE074C9779845E77238850730E9E7036886A56F2B3E15A3EF01
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	YBClicker.build.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	YBClicker.build.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4652	YBClicker.build.exe

C:\Users\Admin\AppData\Local\Temp\YBClicker.build.exe
"C:\Users\Admin\AppData\Local\Temp\YBClicker.build.exe"
1⤵
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
PID:4652

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

timing-profile.log

Path C:\Users\Admin\AppData\Local\YBClicker\timing-profile.log
Size 457B
SHA256 a6006332a9e45c2b049b245f063a0d7477f4aa46bccfa2da788889f12290b6d7
MD5 260b15cc602c0755710bfa2d0feb8ce9
SHA1 d243a68e270e2a2f64bd7d2c49cde5a05799f4b9
SHA512 7cb2f8fc9ef101eacf8d1744b066684072245098d87514e38635d89f9f677a66bb6f239cbaa1b20245b51bd6bb5fa58cf7ce56542c611dead1540087478ee989
TLSH
T1B0F0A750B8F1B4B618D2C25EFB85ADF9EB277B022008D01075F5CC18436083BD9FB622
MD5 SHA1 SHA512 TLSH

Submit Download