yeh.exe
Classification: Malicious
yeh.exe is a malicious file sample (Windows executable). Reported by Hybrid-Analysis and Triage, last seen 2026-11-07.
Detection summary
- 0 antivirus detections
- 21 IDS alerts
- 0 processes observed
- 18 contacted hosts
- 32 DNS requests
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-11-07 05:45:06 | 2026-11-07 05:45:06 | malicious-activity | |
| Asyncrat | Triage | 2026-11-07 05:21:09 | 2026-11-07 05:21:09 | malicious-activity |
Tags
evasive malicious new_domain suspicious windows-server-utility asyncrat okvip adware discovery execution persistence rat spywareSample information
- Filenames
- yeh.exe
- File type
- PE32 executable for MS Windows 4.00 (GUI), Intel i ...
- MD5
e99a26da2fbb1100bab9edaba087beb9- SHA-1
260aed54436666ab142cde057fff81b5a595caf2- SHA-256
1b254e1c8f78e8a72420ce127bc079083f3ef43e0729d175b4b931d0f9787bad- First indexed
- 2026-11-07 05:21:09
- Last updated
- 2026-11-07 05:56:36
Network contacts
172.67.139.41 172.67.199.77 104.21.24.127 172.67.208.76 172.67.149.148 104.21.6.61 172.67.211.254 172.67.161.112 104.21.84.80 104.21.69.180 172.67.180.52 172.67.134.140 172.67.213.47 172.67.183.177 172.67.220.149 172.67.135.81 23.103.226.157 23.32.45.200
DNS requests
8kbet.ae.org 8kbet.ae.org:8443 b52club.bio cat.small-business-tracker.com cat.small-business-tracker.com:8443 crumbs.nat-ho.me crumbs.nat-ho.me:8443 fortunecomps.co.uk fortunecomps.co.uk:8443 m.asianslots.co m.asianslots.co:8443 member.noboncos.co member.noboncos.co:8443 nmk.yosusai.in nmk.yosusai.in:8443 register.mybet88.gg register.mybet88.gg:8443 sports.basebet.me w88thbet.com ww16.tamilrockerslatest.in www.8kbet.ae.org www.cat.small-business-tracker.com www.crumbs.nat-ho.me www.fortunecomps.co.uk www.m.asianslots.co www.member.noboncos.co www.nmk.yosusai.in www.register.mybet88.gg www.xc.estates4u.co www.xx8.loans xc.estates4u.co xc.estates4u.co:8443