Analysis
- user interaction
yes - max time kernel
499s - max time network
473s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/10/2026, 20:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Yammi_Setupx64 (1).exe
Resource
win10v2004-20260911-en
2 signatures
900 seconds
Behavioral task
behavioral2
Sample
Yammi_Setupx64 (1).exe
Resource
win10ltsc2021-20260911-en
5 signatures
900 seconds
Behavioral task
behavioral3
Sample
Yammi_Setupx64 (1).exe
Resource
win11-20260911-en
31 signatures
900 seconds
Behavioral task
behavioral4
Sample
Yammi_Setupx64 (1).exe
Resource
win11ltsc2024-20260911-en
15 signatures
900 seconds
General
- Target Yammi_Setupx64 (1).exe
- Size 239.7MB
- Sample261002-y3mcbatves
- SHA256 b496a0eeae13cb057070b7b81fa4940e36f3830272bf68f4138d3f32847c659d
- MD5 79f2c587f869c65576bcb1f3a19d8997
- SHA1 aa90d4c39f0c78d981783299f2db3fe130c67ca5
- SHA512 72c59af8d33a4d61f41d3988de96a60f7695f8706adcd810610ccff4c1d6560f70508eb07836a3b954f328d1f27c86b248934f713db5665af4a6e6ed71b91c07
- SSDEEP 6291456:MAdI3gz1Ihuww0SSDM5BLKef1158ttOFEV0jxx:Mz3I0SSorKeliCO0jxx
- TLSH T11EC83347F1A801DCD4BBC1B885674A27EBB13455237462EB26A48A292F33FE56F7D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 3336 Yammi_Setupx64 (1).exe 3336 Yammi_Setupx64 (1).exe 3336 Yammi_Setupx64 (1).exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3336 Yammi_Setupx64 (1).exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\Yammi_Setupx64 (1)\fRS1CIRw1AsV\D3DCompiler_47_cor3.dll
- Size 4.5MB
- SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
- MD5 19e527a35241c171d37dc1e6c530053c
- SHA1 b1567bada7a27ab78e65da440f21809f50b9d34c
- SHA512 23d38b55f5b17bf0228b16a85787d384da0a700190fc289281190272a0d2dd374be0f7f64d8b642836ccbe2351b72e9ef5c7e2b12d0a7495317e986fd5e3c886
- SSDEEP 49152:c6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/V:cUdeqt737jFm5wd
- TLSH T143268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Yammi_Setupx64 (1)\fRS1CIRw1AsV\PresentationNative_cor3.dll
- Size 1.2MB
- SHA256 0002f81ee5c803cb90329f2ab08556fd6de29d1ddd6d83446d1d4c19748f25e8
- MD5 5abba52442f893f51903867a984309a8
- SHA1 935e25fd68702de5b41ffdbd89be7c74e0a35d98
- SHA512 63791cb693e4abda219c6f0df951c3b91e8dbc19bf2fb2caec091fa62bca8d91044cba77979e9a690138354676e7cea1a3a320b38b06ab0366d6830092455a99
- SSDEEP 24576:agaltAn1r1sE33slrVCP0QSeDOM8zT3n6kcNbNUdah6ox3GmOBlIefATbpwwPnFR:rnR+g8lYP00OM8zT3GbNUdvoxWZBlIue
- TLSH T163453A22E2E642E5C47FC1B8C6469717FBB1740A131C66DB87608B652F27FE0963E364
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Yammi_Setupx64 (1)\fRS1CIRw1AsV\wpfgfx_cor3.dll
- Size 1.9MB
- SHA256 f4f7a44a3480c0b7b2d5a603cb7d0c41d9ae9b2633a8b30eb59f66a2697045f3
- MD5 4f41b8b32bc1c99e81ef00e0f091ac15
- SHA1 e06f63d95920b72e98829b050362f424d342ab7c
- SHA512 ee8b2966ddc2e0abe3d8762cb5d2dffde61b5ae1bc7410f80297155e41a28914f172db47d769d0f819c331430c075db183de704347ef49a8974b2b30c3d5ea55
- SSDEEP 24576:RTNVE8rGhmlApTw21LLP9SPsgV32H+Gjq8hfzjx42iSa1j7sPek6Q6e8VwrMw:xq8mTw2l9SPsimjT7j/iSaF7sP8IX
- TLSH T182954A46B6FC40E9D46AD23CD9DB861BF27178102761A7CF23A4479DAF27BD0097A360
- MD5 SHA1 SHA512 SSDEEP TLSH