General
- Target Yandex.exe
- Size 10.7MB
- Sample261024-edd5vsfw3v
- SHA256 c83314a852b0fa322ead388f6dce5e1acb4097337d12fd40ccd2f4a1cea8fac5
- MD5 284e58053aaaf7105c4629a6eaa47148
- SHA1 24a00990caf346fe1d8ab86d716f8f9d57b4f21e
- SHA512 1e4b6641f4eec6f20f36e6b6d147255b1f0508fde113a321aa36954679abca05eb470d79d641532c041e3855ffdead992d55c1b714ae10a9638b72396e418a52
- SSDEEP 196608:6nGtuzX2hn6Ak+mhv2/NTx9Pe20/xtiu6E2F:6IOX2h6N+mB2ldCxtie4
- TLSH T112B6D082EB822125DE2B7A71113C7DBB86196DC95B704BCB97EA7C8405317D31836F8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
Yandex.exe
Resource
win10v2004-20260911-en
14 signatures
40 seconds
Behavioral task
behavioral2
Sample
Yandex.exe
Resource
win11ltsc2024-20260911-en
8 signatures
40 seconds
Malware Config
Targets
-
- Target Yandex.exe
- Size 10.7MB
- SHA256 c83314a852b0fa322ead388f6dce5e1acb4097337d12fd40ccd2f4a1cea8fac5
- MD5 284e58053aaaf7105c4629a6eaa47148
- SHA1 24a00990caf346fe1d8ab86d716f8f9d57b4f21e
- SHA512 1e4b6641f4eec6f20f36e6b6d147255b1f0508fde113a321aa36954679abca05eb470d79d641532c041e3855ffdead992d55c1b714ae10a9638b72396e418a52
- SSDEEP 196608:6nGtuzX2hn6Ak+mhv2/NTx9Pe20/xtiu6E2F:6IOX2h6N+mB2ldCxtie4
- TLSH T112B6D082EB822125DE2B7A71113C7DBB86196DC95B704BCB97EA7C8405317D31836F8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.