General

  • Target

    06ccd2237595989613f5e5eefeb59684

  • Size

    535KB

  • MD5

    06ccd2237595989613f5e5eefeb59684

  • SHA1

    50f369f398dc4e03fa65e497daff565fcdcda125

  • SHA256

    af141c9770400668b78c9fb5e1e89c52aef75bfec88bc5dcab3af13e86bfb462

  • SHA512

    70a90830ae5d2ad6bd508f17b8563af79e217cade3d15818707072155c9e13c3ee561955ecbf9752b518147a35caf94fab70915a8046b6c819b2ec097387bbf3

  • SSDEEP

    12288:/0B6cc/nGQ6k+UwVvGot1ZVlSc8jmMjjGHkxg1xJOProRrp9C7/rZ:/G6FebEWlSc8jmMjdOK0RrKh

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 06ccd2237595989613f5e5eefeb59684
    .rar
  • yuba/data.db
  • yuba/pcre3.dll
    .dll windows:4 windows x86 arch:x86

    f867eaba1f47d94594c5bf1041b8c10b


    Headers

    Imports

    Exports

    Sections

  • yuba/域霸扫描器.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • yuba/新云软件.url
    .url