Overview

overview

7

Static

static

3

yba.zip

windows7-x64

1

yba.zip

windows10-1703-x64

1

HtmlAgilityPack.dll

windows10-2004-x64

1

HtmlAgilityPack.dll

windows10-1703-x64

1

HtmlAgilityPack.pdb

windows10-2004-x64

3

HtmlAgilityPack.pdb

windows10-1703-x64

3

HtmlAgilityPack.xml

windows10-2004-x64

1

HtmlAgilityPack.xml

windows10-1703-x64

1

R34Downloader.exe

windows7-x64

1

R34Downloader.exe

windows10-1703-x64

7

R34Downloader.exe.xml

windows10-2004-x64

1

R34Downloader.exe.xml

windows10-1703-x64

1

R34Downloader.pdb

windows7-x64

3

R34Downloader.pdb

windows10-1703-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    yba.zip

  • Size

    304KB

  • MD5

    2899b86907ac87d38c1e1447285722a5

  • SHA1

    03f0f34a68e04666dab6e7da2cf5150f33ca4057

  • SHA256

    2864b88797bfdc043dae9c5367e7f1c36e3070868894af856ff489079a0a483c

  • SHA512

    807c5badf8e7dca62a2695132024adc6483733bbfadf2397d4cac256ddc25cb5245700f91ddb3691b166321dd3589d463717c8512b26ec6e775929e1cd1d8f59

  • SSDEEP

    6144:mGiPYprF1yHmCSqti0yE9g9etqkTQm3K09nD4jTDeH0sVPUQFUDT:jcYyGCSciz8tqkx3B9ncTDeUqxFUDT

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • yba.zip
    .zip
  • HtmlAgilityPack.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • HtmlAgilityPack.pdb
  • HtmlAgilityPack.xml
    .xml
  • R34Downloader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • R34Downloader.exe.config
    .xml
  • R34Downloader.pdb