Analysis

  • user interaction
    yes
  • max time kernel
    898s
  • max time network
    674s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    23/10/2026, 02:05

General

  • Target
    yuri.exe
  • Size 1.5MB
  • Sample261023-cjc4msca96
  • SHA256 0b93e00017d25d5f466a5d6fb97a0fa496e41cb55d5455a0020172978eea4512
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\yuri.exe
    "C:\Users\Admin\AppData\Local\Temp\yuri.exe"
    1⤵
      PID:568
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:552

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            ClearSwitch.mp4

            • Path C:\Users\Admin\Desktop\ClearSwitch.mp4
            • Size 683KB
            • SHA256 97a4b9cc67b7e79d64a2aeea5c153efcef301b05627ca1ae17ff15def9759929
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ConfirmAssert.xlsx

            • Path C:\Users\Admin\Desktop\ConfirmAssert.xlsx
            • Size 10KB
            • SHA256 83a9642de5acb1c1b4f0c1cc163b7d6126176d9e967f34602d759335e945e50d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ConvertSuspend.xsl

            • Path C:\Users\Admin\Desktop\ConvertSuspend.xsl
            • Size 924KB
            • SHA256 f70a6164c3c7d0fb4288a568671dd81d432114fe34603114aecc6c1109995290
            • MD5 SHA1 SHA512 SSDEEP TLSH

            InvokeStart.contact

            • Path C:\Users\Admin\Desktop\InvokeStart.contact
            • Size 1.2MB
            • SHA256 6c822ad17b0517be78b42b8f8fe07de08294bac68dff147eb79173768eb06c59
            • MD5 SHA1 SHA512 SSDEEP TLSH

            JoinApprove.csv

            • Path C:\Users\Admin\Desktop\JoinApprove.csv
            • Size 643KB
            • SHA256 4fed9a9be3a91eb591da0ea440b1eed7fc7c77ec158c7197e0d76c98bed5e8b4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LimitApprove.7z

            • Path C:\Users\Admin\Desktop\LimitApprove.7z
            • Size 482KB
            • SHA256 75f9f4bff2b842a2ee656ddbdf85e3859b3843cc3ca608dbc15fab2f16af73b3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Microsoft Edge.lnk

            • Path C:\Users\Admin\Desktop\Microsoft Edge.lnk
            • Size 2KB
            • SHA256 da4368adb48c940b88445f366bc0d7e60991301f80b631a96f0f6487217aab63
            • MD5 SHA1 SHA512 TLSH

            MountBlock.mp3

            • Path C:\Users\Admin\Desktop\MountBlock.mp3
            • Size 723KB
            • SHA256 8a1af5c8fe9e73ed5c063b72e32fab91a83cee4a4416591b8b582a582d6f66c2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            PingUse.xml

            • Path C:\Users\Admin\Desktop\PingUse.xml
            • Size 964KB
            • SHA256 990908053262aaa0b0aadc61345d85e5b678cc09217fcc031b6a71a17ef31d81
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ProtectClear.tiff

            • Path C:\Users\Admin\Desktop\ProtectClear.tiff
            • Size 442KB
            • SHA256 8df31c4f1d20ce9a3afad73dab50cd0a36843ce956b4437f0c3ce10c72990aae
            • MD5 SHA1 SHA512 SSDEEP TLSH

            RegisterSearch.dib

            • Path C:\Users\Admin\Desktop\RegisterSearch.dib
            • Size 1.2MB
            • SHA256 d39f15b3c9483cdbc0dddcb771a93fe5f2ae0ac38573709cd68a811d2dd22eeb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ResolveUnblock.xltx

            • Path C:\Users\Admin\Desktop\ResolveUnblock.xltx
            • Size 1.1MB
            • SHA256 5227472178c0d55877e4b42c2cd822619ca588c012de4ed99110b0a1c2c3ce14
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SaveClear.midi

            • Path C:\Users\Admin\Desktop\SaveClear.midi
            • Size 1.0MB
            • SHA256 b4c841e85f951f239d6598d0bb1d8a935957cef3888e7df59f46985e15e3f9eb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SkipDebug.xlsx

            • Path C:\Users\Admin\Desktop\SkipDebug.xlsx
            • Size 15KB
            • SHA256 ae76e34d188e119919e7b338efc68a3dd04bd5d51bab624a9e5e73d6a4933a07
            • MD5 SHA1 SHA512 SSDEEP TLSH

            StartRequest.htm

            • Path C:\Users\Admin\Desktop\StartRequest.htm
            • Size 803KB
            • SHA256 11e5a159c6115dcc5f51d5f115ebbc9500e78dfd460f28c6159c1ecdd1c370fa
            • MD5 SHA1 SHA512 SSDEEP TLSH

            StepFormat.rmi

            • Path C:\Users\Admin\Desktop\StepFormat.rmi
            • Size 602KB
            • SHA256 313fb0e5efc20c8a05f1322d03f1e8ad519215a8addd6f6db762db7a8441619d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            TraceInitialize.xlsx

            • Path C:\Users\Admin\Desktop\TraceInitialize.xlsx
            • Size 14KB
            • SHA256 e6b3e0e250af4e13bd63a1693e1f7e9ba3122d19b3f8bd390aab3161920e6c61
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnlockSelect.edrwx

            • Path C:\Users\Admin\Desktop\UnlockSelect.edrwx
            • Size 763KB
            • SHA256 eb4ab83e67ce5f22a0e8a12b515b8503572c682407df8cc130589ad17de5c87c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UnpublishMeasure.dot

            • Path C:\Users\Admin\Desktop\UnpublishMeasure.dot
            • Size 1004KB
            • SHA256 50d1a9351c5b4a3196e77be2ec56b9e7b5defbb8b082db47be92533054b7ca43
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UpdatePing.jpe

            • Path C:\Users\Admin\Desktop\UpdatePing.jpe
            • Size 1.7MB
            • SHA256 8323d37acecc0539d6d27982a7ba007b8cf41cea215ed6652a3d086b554ca498
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UseExport.wmv

            • Path C:\Users\Admin\Desktop\UseExport.wmv
            • Size 522KB
            • SHA256 bdebe5c875220affc0029121c28e8f04bd72839c9d4bb7f049853a5a06b14021
            • MD5 SHA1 SHA512 SSDEEP TLSH

            WaitPop.contact

            • Path C:\Users\Admin\Desktop\WaitPop.contact
            • Size 562KB
            • SHA256 cd5ef0f0dcb51e1c40ce56246a67a610f3660be6764546cedb5054020ebfb21d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Acrobat Reader DC.lnk

            • Path C:\Users\Public\Desktop\Acrobat Reader DC.lnk
            • Size 2KB
            • SHA256 f8398b6b6b0295516758e31fdb2f693c7f5afd1dae6846ca14d1fdd787ef7967
            • MD5 SHA1 SHA512 TLSH

            Firefox.lnk

            • Path C:\Users\Public\Desktop\Firefox.lnk
            • Size 1KB
            • SHA256 7bdb3f3ef69bed78975618dd4f9d47ad9580286b300c4b3901dd339f32368ee6
            • MD5 SHA1 SHA512 TLSH

            Google Chrome.lnk

            • Path C:\Users\Public\Desktop\Google Chrome.lnk
            • Size 2KB
            • SHA256 328d6a7388983bc6378d3b73bed6f54d332bc94af929cabe756c1781c10d1590
            • MD5 SHA1 SHA512 TLSH

            Microsoft Edge.lnk

            • Path C:\Users\Public\Desktop\Microsoft Edge.lnk
            • Size 2KB
            • SHA256 8bfb59ad4e0c6294c097f9d09b20a10897e7aefaf39678cf5f9e11152908a662
            • MD5 SHA1 SHA512 TLSH

            VLC media player.lnk

            • Path C:\Users\Public\Desktop\VLC media player.lnk
            • Size 923B
            • SHA256 8bbbf6dc2d002b36c891090b8fcdfba0edce60ceaadf1258283d79c9e7944f3e
            • MD5 SHA1 SHA512 TLSH