Analysis

  • max time kernel
    149s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    27/10/2026, 02:49

General

  • Target
    yuzu_Early_Access_Launcher.exe
  • Size 3.0MB
  • Sample261027-da42fa1shs
  • SHA256 85ddf8bb2cb05d3c04f77b1c10677caaf1d15337c734c24836dd8d0ac7ce456e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

Processes

  • C:\Users\Admin\AppData\Local\Temp\yuzu_Early_Access_Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\yuzu_Early_Access_Launcher.exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    PID:2424

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        launcher.ini

        • Path C:\Users\Admin\AppData\Local\Temp\launcher.ini
        • Size 85B
        • SHA256 23141d4f625ab05281e232f72b8079b4dc7963af6f027b116b0e8e253031e978
        • MD5 SHA1 SHA512 TLSH

        memory/2424-0-0x000001E54EDD0000-0x000001E54F0CC000-memory.dmp

        memory/2424-1-0x000001E569510000-0x000001E569586000-memory.dmp

        memory/2424-2-0x000001E5696B0000-0x000001E5696C0000-memory.dmp

        memory/2424-13-0x000001E574620000-0x000001E57466C000-memory.dmp

        memory/2424-15-0x000001E5748E0000-0x000001E5748E8000-memory.dmp

        memory/2424-14-0x000001E5748A0000-0x000001E5748C6000-memory.dmp

        memory/2424-16-0x000001E5696B0000-0x000001E5696C0000-memory.dmp

        memory/2424-17-0x000001E5696B0000-0x000001E5696C0000-memory.dmp

        memory/2424-18-0x000001E5696B0000-0x000001E5696C0000-memory.dmp