Extracted

• • Target
    https://www.mediafire.com/file/xltgz1n2cdp93co/YUNA-Setup-1.12.exe/file

  Score

  10^/10

  defense_evasiondiscoveryexecutioninstallerpersistenceprivilege_escalationpyinstallerransomwaretrojan

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Downloads MZ/PE file

  • Creates a file in the Startup directory

    A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

    persistenceprivilege_escalation

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    defense_evasiontrojan

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Network Share Discovery

    Attempt to gather information on host network.

    discovery

  • Discovers running processes

    Running process information can be used to identify security tools or plan follow-on actions.

    discovery

  • Hide Artifacts: Hidden Files and Directories

    defense_evasion
  behavioral1