General
- Target YMNOne.exe
- Size 163.1MB
- Sample260828-x39beastfv
- SHA256 bef8972b2214a23a676f51f793e8a69c5431ad5c42bf72f457cf6528548a6870
- MD5 77fd060accdb28d31515b671293128d5
- SHA1 7149380c5e64ea74b1d5c874a8f7242fff150fc6
- SHA512 77302133e44f3f40ab5cd0b2905c84a234537981c99a9c6a003a53aaab5405609145c19d5c789def553f5e9deac800b4f7af640e15decbc093a40aeffa6a7ee7
- SSDEEP 786432:1uMLSQx8OA83yg1Yg1WV5OtsFktaPxNvsCMTc15MZjX0DRy77fBCCTMGJ:15Zx8VqHFWqAuCOc15MBvzBDMGJ
- TLSH T129887C11A3E85E56D63F8279D6B342A1D670EC425351C2CF0498FE493FB37C27A362A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
YMNOne.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
YMNOne.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target YMNOne.exe
- Size 163.1MB
- SHA256 bef8972b2214a23a676f51f793e8a69c5431ad5c42bf72f457cf6528548a6870
- MD5 77fd060accdb28d31515b671293128d5
- SHA1 7149380c5e64ea74b1d5c874a8f7242fff150fc6
- SHA512 77302133e44f3f40ab5cd0b2905c84a234537981c99a9c6a003a53aaab5405609145c19d5c789def553f5e9deac800b4f7af640e15decbc093a40aeffa6a7ee7
- SSDEEP 786432:1uMLSQx8OA83yg1Yg1WV5OtsFktaPxNvsCMTc15MZjX0DRy77fBCCTMGJ:15Zx8VqHFWqAuCOc15MBvzBDMGJ
- TLSH T129887C11A3E85E56D63F8279D6B342A1D670EC425351C2CF0498FE493FB37C27A362A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled