Analysis

  • max time kernel
    148s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/10/2026, 02:49

General

  • Target
    yuzu_Early_Access_Launcher.exe
  • Size 3.0MB
  • Sample261027-da345s1sg1
  • SHA256 026bec22537196544a3279dcc8779c83211a7b1521239e8d1dd844710e1db29b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

Processes

  • C:\Users\Admin\AppData\Local\Temp\yuzu_Early_Access_Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\yuzu_Early_Access_Launcher.exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    PID:1340

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        launcher.ini

        • Path C:\Users\Admin\AppData\Local\Temp\launcher.ini
        • Size 105B
        • SHA256 4609f36c032c40b1c90873f775dcf4e322602ac4852f1403e2ab2bdd61984f04
        • MD5 SHA1 SHA512 TLSH

        memory/1340-4-0x00007FFE092C0000-0x00007FFE09C64000-memory.dmp

        memory/1340-20-0x00000278C8E50000-0x00000278C8E58000-memory.dmp

        memory/1340-3-0x00000278C8A70000-0x00000278C8AE6000-memory.dmp

        memory/1340-0-0x00007FFE0944F000-0x00007FFE09450000-memory.dmp

        memory/1340-5-0x00007FFE092C0000-0x00007FFE09C64000-memory.dmp

        memory/1340-6-0x00007FFE092C0000-0x00007FFE09C64000-memory.dmp

        memory/1340-2-0x00007FFE092C0000-0x00007FFE09C64000-memory.dmp

        memory/1340-18-0x00000278C8DC0000-0x00000278C8E0C000-memory.dmp

        memory/1340-7-0x00007FFE092C0000-0x00007FFE09C64000-memory.dmp

        memory/1340-19-0x00000278C8E10000-0x00000278C8E36000-memory.dmp

        memory/1340-1-0x00000278AE230000-0x00000278AE52C000-memory.dmp

        memory/1340-21-0x00007FFE092C0000-0x00007FFE09C64000-memory.dmp

        memory/1340-22-0x00007FFE092C0000-0x00007FFE09C64000-memory.dmp

        memory/1340-23-0x00007FFE092C0000-0x00007FFE09C64000-memory.dmp

        memory/1340-24-0x00007FFE092C0000-0x00007FFE09C64000-memory.dmp