YakuzaLoader[.]7z

Sharing

Copy URL Twitter E-mail

General

Target

YakuzaLoader.7z
Size

87.2MB
MD5

b40d4c5be96cd05c490faa22a6c1ee39
SHA1

5e6ded6b64ef4379a82b0e344e43ecd472c310af
SHA256

5a6a7bb31fd9d94ca37d6b397fa77334e2aec4b78bfe0abbfa2b76212537d8e3
SHA512

c7df346bbe67b1806f7b1cb4ff73710f593909eff084db455d9739a57c009ec39b24f52a9721b9e08f4f1455be7f72b37bd6726d826ce1b2ae886da6a87aca95
SSDEEP

1572864:xXUGTkdKClKvTEt+TtUMAyjzPqxD6VpRcPbYyvVTH5GYqkqsMXbFT:xXnT5Cl2EtOCE/LCz3V75GYqsMXZT

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/YakuzaLoader/libs/natives/yakuza.dll	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/YakuzaLoader/libs/natives/yakuza.dll

Files

YakuzaLoader.7z
.7z

Password: yakuza_2024
YakuzaLoader/Pooliver.7z
.7z

Password: yakuza_2024
Pooliver/assets/capes/badlion/darkred/0.png
.png

Password: yakuza_2024
Pooliver/assets/capes/badlion/darkred/1.png
.png

Password: yakuza_2024
Pooliver/assets/capes/badlion/darkred/10.png
.png

Password: yakuza_2024
Pooliver/assets/capes/badlion/darkred/11.png
.png

Password: yakuza_2024
Pooliver/assets/capes/badlion/darkred/12.png
.png

Password: yakuza_2024
Pooliver/assets/capes/badlion/darkred/13.png
.png

Password: yakuza_2024
Pooliver/assets/capes/badlion/darkred/14.png
.png

Password: yakuza_2024
Pooliver/assets/capes/badlion/darkred/2.png
.png
Pooliver/assets/capes/badlion/darkred/3.png
.png
Pooliver/assets/capes/badlion/darkred/4.png
.png
Pooliver/assets/capes/badlion/darkred/5.png
.png
Pooliver/assets/capes/badlion/darkred/6.png
.png
Pooliver/assets/capes/badlion/darkred/7.png
.png
Pooliver/assets/capes/badlion/darkred/8.png
.png
Pooliver/assets/capes/badlion/darkred/9.png
.png
Pooliver/assets/cat/0.png
.png
Pooliver/assets/cat/1.png
.png
Pooliver/assets/cat/10.png
.png
Pooliver/assets/cat/11.png
.png
Pooliver/assets/cat/12.png
.png
Pooliver/assets/cat/13.png
.png
Pooliver/assets/cat/14.png
.png
Pooliver/assets/cat/15.png
.png
Pooliver/assets/cat/16.png
.png
Pooliver/assets/cat/17.png
.png
Pooliver/assets/cat/18.png
.png
Pooliver/assets/cat/19.png
.png
Pooliver/assets/cat/2.png
.png
Pooliver/assets/cat/20.png
.png
Pooliver/assets/cat/21.png
.png
Pooliver/assets/cat/22.png
.png
Pooliver/assets/cat/23.png
.png
Pooliver/assets/cat/24.png
.png
Pooliver/assets/cat/25.png
.png
Pooliver/assets/cat/26.png
.png
Pooliver/assets/cat/27.png
.png
Pooliver/assets/cat/28.png
.png
Pooliver/assets/cat/3.png
.png
Pooliver/assets/cat/4.png
.png
Pooliver/assets/cat/5.png
.png
Pooliver/assets/cat/6.png
.png
Pooliver/assets/cat/7.png
.png
Pooliver/assets/cat/8.png
.png
Pooliver/assets/cat/9.png
.png
Pooliver/assets/esp/animegirl1/Image_1.006.png
.png
Pooliver/assets/esp/animegirl1/Image_2.005.png
.png
Pooliver/assets/esp/animegirl1/Image_3.003.png
.png
Pooliver/assets/esp/animegirl1/Image_5.003.png
.png
Pooliver/assets/esp/animegirl1/Image_6.003.png
.png
Pooliver/assets/esp/animegirl1/Image_8.003.png
.png
Pooliver/assets/esp/animegirl1/animegirl1.mtl
Pooliver/assets/esp/animegirl1/animegirl1.obj
Pooliver/assets/esp/antiterrorist/Image_0.006.png
.png
Pooliver/assets/esp/antiterrorist/Image_12.002.png
.png
Pooliver/assets/esp/antiterrorist/Image_3.002.png
.png
Pooliver/assets/esp/antiterrorist/Image_6.002.png
.png
Pooliver/assets/esp/antiterrorist/Image_9.002.png
.png
Pooliver/assets/esp/antiterrorist/antiterrorist.mtl
Pooliver/assets/esp/antiterrorist/antiterrorist.obj
Pooliver/assets/esp/ataturk/ataturk.mtl
Pooliver/assets/esp/ataturk/ataturk.obj
Pooliver/assets/esp/ataturk/ataturk.png
.png
Pooliver/assets/esp/ataturk/ayakkabi.png
.png
Pooliver/assets/esp/ataturk/eller.png
.png
Pooliver/assets/esp/ataturk/kirpi.png
.png
Pooliver/assets/esp/ataturk/kirpi1.png
.png
Pooliver/assets/esp/ataturk/mont.png
.png
Pooliver/assets/esp/ataturk/opcity.png
.png
Pooliver/assets/esp/ataturk/opcity1.png
.png
Pooliver/assets/esp/ataturk/pant.png
.png
Pooliver/assets/esp/ataturk/retina.png
.png
Pooliver/assets/esp/ataturk/sackas.png
.png
Pooliver/assets/esp/ataturk/sackas1.png
.png
Pooliver/assets/esp/ataturk/yelek.png
.png
Pooliver/assets/esp/ataturk/zemin.png
.png
Pooliver/assets/esp/baki/baki.mtl
Pooliver/assets/esp/baki/baki.obj
Pooliver/assets/esp/baki/body.png
.png
Pooliver/assets/esp/baki/hair.png
.png
Pooliver/assets/esp/capybara/Image_0.016.png
.png
Pooliver/assets/esp/capybara/capybara.mtl
Pooliver/assets/esp/capybara/capybara.obj
Pooliver/assets/esp/cj/Image_0.018.png
.png
Pooliver/assets/esp/cj/Image_1.015.png
.png
Pooliver/assets/esp/cj/Image_2.012.png
.png
Pooliver/assets/esp/cj/Image_3.009.png
.png
Pooliver/assets/esp/cj/cj.mtl
Pooliver/assets/esp/cj/cj.obj
Pooliver/assets/esp/dortkol/Image_0.001.png
.png
Pooliver/assets/esp/dortkol/Image_0.013.png
.png
Pooliver/assets/esp/dortkol/Image_2.009.png
.png
Pooliver/assets/esp/dortkol/dortkol.mtl
Pooliver/assets/esp/dortkol/dortkol.obj
Pooliver/assets/esp/elprimo/elprimo.mtl
Pooliver/assets/esp/elprimo/elprimo.obj
Pooliver/assets/esp/elprimo/elprimo.png
.png
Pooliver/assets/esp/finn/Image_0.018.png
.png
Pooliver/assets/esp/finn/finn.mtl
Pooliver/assets/esp/finn/finn.obj
Pooliver/assets/esp/hitler/body.mtl
Pooliver/assets/esp/hitler/body.obj
Pooliver/assets/esp/hitler/head.mtl
Pooliver/assets/esp/hitler/head.obj
Pooliver/assets/esp/hitler/hitlerbody_colspec.png
.png
Pooliver/assets/esp/hitler/hitlerhead_colspec.png
.png
Pooliver/assets/esp/jake/Image_0.018.png
.png
Pooliver/assets/esp/jake/jake.mtl
Pooliver/assets/esp/jake/jake.obj
Pooliver/assets/esp/kachow/Image_0.008.png
.png
Pooliver/assets/esp/kachow/Image_1.005.png
.png
Pooliver/assets/esp/kachow/Image_2.004.png
.png
Pooliver/assets/esp/kachow/kachow.mtl
Pooliver/assets/esp/kachow/kachow.obj
Pooliver/assets/esp/katarina/Image_0.007.png
.png
Pooliver/assets/esp/katarina/Katarina.obj
Pooliver/assets/esp/katarina/katarina.mtl
Pooliver/assets/esp/monke/Image_0.011.png
.png
Pooliver/assets/esp/monke/Image_2.007.png
.png .ps1 polyglot
Pooliver/assets/esp/monke/monke.mtl
Pooliver/assets/esp/monke/monke.obj
Pooliver/assets/esp/negan/Image_0.010.png
.png
Pooliver/assets/esp/negan/Image_11.003.jpg
.jpg
Pooliver/assets/esp/negan/Image_12.003.png
.png
Pooliver/assets/esp/negan/Image_13.003.png
.png
Pooliver/assets/esp/negan/Image_15.001.png
.png
Pooliver/assets/esp/negan/Image_2.006.png
.png
Pooliver/assets/esp/negan/Image_4.004.png
.png
Pooliver/assets/esp/negan/Image_5.004.png
.png
Pooliver/assets/esp/negan/Image_7.004.png
.png
Pooliver/assets/esp/negan/Image_9.003.png
.png
Pooliver/assets/esp/negan/negan.mtl
Pooliver/assets/esp/negan/negan.obj
Pooliver/assets/esp/rakun/Image_0.018.jpg
.jpg
Pooliver/assets/esp/rakun/rakun.mtl
Pooliver/assets/esp/rakun/rakun.obj
Pooliver/assets/esp/rath/Image_0.015.png
.png
Pooliver/assets/esp/rath/rath.mtl
Pooliver/assets/esp/rath/rath.obj
Pooliver/assets/esp/reyna/TP_Core_Eye_DF.png
.png
Pooliver/assets/esp/reyna/TP_Vampire_S0_DF.png
.png
Pooliver/assets/esp/reyna/TP_Vampire_S0_Hair_DF.png
.png
Pooliver/assets/esp/reyna/reyna.mtl
Pooliver/assets/esp/reyna/reyna.obj
Pooliver/assets/esp/rias/Image_0.017.png
.png
Pooliver/assets/esp/rias/Image_2.011.png
.png
Pooliver/assets/esp/rias/Image_4.005.png
.png
Pooliver/assets/esp/rias/rias.mtl
Pooliver/assets/esp/rias/rias.obj
Pooliver/assets/esp/ryza/000.dds
.png
Pooliver/assets/esp/ryza/000.png
.png
Pooliver/assets/esp/ryza/000d.png
.png
Pooliver/assets/esp/ryza/006.png
.png
Pooliver/assets/esp/ryza/008.png
.png
Pooliver/assets/esp/ryza/012.dds
.png
Pooliver/assets/esp/ryza/012.png
.png
Pooliver/assets/esp/ryza/016.png
.png
Pooliver/assets/esp/ryza/body_d1.png
.png
Pooliver/assets/esp/ryza/nip1_d.png
.png
Pooliver/assets/esp/ryza/ryza.mtl
Pooliver/assets/esp/ryza/ryza.obj
Pooliver/assets/esp/skibidi/Image_0.012.png
.png
Pooliver/assets/esp/skibidi/Image_1.010.png
.png
Pooliver/assets/esp/skibidi/Image_2.008.png
.png
Pooliver/assets/esp/skibidi/eye.png
.png
Pooliver/assets/esp/skibidi/skibidi.mtl
Pooliver/assets/esp/skibidi/skibidi.obj
Pooliver/assets/esp/sussy/Image_0.png
.png
Pooliver/assets/esp/sussy/Image_1.png
.png
Pooliver/assets/esp/sussy/sussy.mtl
Pooliver/assets/esp/sussy/sussy.obj
Pooliver/assets/esp/terrorist/arm.png
.png
Pooliver/assets/esp/terrorist/body.png
.png
Pooliver/assets/esp/terrorist/face.png
.png
Pooliver/assets/esp/terrorist/glove.png
.png
Pooliver/assets/esp/terrorist/legs.png
.png
Pooliver/assets/esp/terrorist/terrorist.mtl
Pooliver/assets/esp/terrorist/terrorist.obj
Pooliver/assets/etb.png
.png
Pooliver/assets/font/Applefnt.ttf
Pooliver/assets/font/Arial.ttf
Pooliver/assets/font/Biko_Regular.otf
Pooliver/assets/font/Comfortaa-Regular.ttf
Pooliver/assets/font/Comme-Medium.ttf
Pooliver/assets/font/Comme-SemiBold.ttf
Pooliver/assets/font/Dreamscape.ttf
Pooliver/assets/font/Eaves.ttf
Pooliver/assets/font/FiraCode-Medium.ttf
Pooliver/assets/font/Icon-Font.ttf
Pooliver/assets/font/Jello.ttf
Pooliver/assets/font/Lato-Medium.ttf
Pooliver/assets/font/Lato-Regular.ttf
Pooliver/assets/font/Light.ttf
Pooliver/assets/font/Minecraft.ttf
Pooliver/assets/font/Moon.ttf
Pooliver/assets/font/MuseoSans_900.otf
Pooliver/assets/font/OpenSans-Regular.ttf
Pooliver/assets/font/Poppins-Light.ttf
Pooliver/assets/font/Product Sans 400.ttf
Pooliver/assets/font/Proxima-Regular.ttf
Pooliver/assets/font/Roboto-Light.ttf
Pooliver/assets/font/Roboto-Medium.ttf
Pooliver/assets/font/Roboto-Regular.ttf
Pooliver/assets/font/SF.ttf
Pooliver/assets/font/SFREGULAR.ttf
Pooliver/assets/font/STXihei.ttf
Pooliver/assets/font/SigmaRegular.ttf
Pooliver/assets/font/TahomaBold.ttf
Pooliver/assets/font/Tommy3.ttf
Pooliver/assets/font/Ubuntu-M.ttf
Pooliver/assets/font/Verdana.ttf
Pooliver/assets/font/aldotheapache.ttf
Pooliver/assets/font/bold.ttf
Pooliver/assets/font/comicfont.ttf
Pooliver/assets/font/font.ttf
Pooliver/assets/font/icon2.ttf
Pooliver/assets/font/icons.ttf
Pooliver/assets/font/icons2.ttf
Pooliver/assets/font/lotsoficonfont.ttf
Pooliver/assets/font/museosans-900.ttf
Pooliver/assets/font/oxide.ttf
Pooliver/assets/font/rain.ttf
Pooliver/assets/font/tahoma.ttf
Pooliver/assets/font/title.ttf
Pooliver/assets/hue.png
.png
Pooliver/assets/icons/32.png
.png
Pooliver/assets/icons/64.png
.png
Pooliver/assets/icons/asstolfo.png
.png
Pooliver/assets/icons/astolfo3.png
.png
Pooliver/assets/icons/astolfo4.png
.png
Pooliver/assets/icons/astolfo5.png
.png
Pooliver/assets/icons/esp.png
.png
Pooliver/assets/icons/esp2.png
.png
Pooliver/assets/icons/felix.png
.png
Pooliver/assets/icons/felix2.png
.png
Pooliver/assets/icons/hideri.png
.png
Pooliver/assets/icons/saika.png
.png
Pooliver/assets/icons/venti.png
.png
Pooliver/assets/shader/glow.frag
Pooliver/assets/shader/outline.frag
Pooliver/assets/shader/vertex.vert
Pooliver/assets/skeetchainmail.png
.png
Pooliver/assets/steve.png
.png
Pooliver/assets/track.png
.png
Pooliver/assets/vapeclickgui/back.png
.png
Pooliver/assets/vapeclickgui/home.png
.png
Pooliver/assets/vapeclickgui/module.png
.png
YakuzaLoader/README.txt
YakuzaLoader/libs/libs.jar
.jar
YakuzaLoader/libs/natives/yakuza.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

Java_tr_groax_O_Q_u_S_K__00024yakuzaLoader
Java_tr_groax_O_Q_u_S_n__00024yakuzaLoader
Java_tr_groax_O_Q_u_j_E__00024yakuzaLoader
Java_tr_groax_O_Q_u_j_d__00024yakuzaLoader
Java_tr_groax_O_Q_u_k_P__00024yakuzaLoader
Java_tr_groax_O_Q_u_k_s__00024yakuzaLoader
Java_tr_groax_O_W_00024w__00024yakuzaLoader
Java_tr_groax_O_W__00024yakuzaLoader
Java_tr_groax_O_j_I_m__00024yakuzaLoader
Java_tr_groax_O_j_e__00024yakuzaLoader
Java_tr_groax_O_j_f__00024yakuzaLoader
Java_tr_groax_O_l_I_L__00024yakuzaLoader
Java_tr_groax_O_l_I_w__00024yakuzaLoader
Java_tr_groax_O_l_N_R__00024yakuzaLoader
Java_tr_groax_O_l_N_U__00024yakuzaLoader
Java_tr_groax_O_l_Y_L__00024yakuzaLoader
Java_tr_groax_O_l_Y_e__00024yakuzaLoader
Java_tr_groax_O_l_e_I__00024yakuzaLoader
Java_tr_groax_O_l_e_R__00024yakuzaLoader
Java_tr_groax_O_l_h_K__00024yakuzaLoader
Java_tr_groax_O_l_h_R__00024yakuzaLoader
Java_tr_groax_O_z_r__00024yakuzaLoader
Java_tr_groax_O_z_s__00024yakuzaLoader
Java_tr_groax_V_R__00024yakuzaLoader
Java_tr_groax_launcher_I_l__00024yakuzaLoader
Java_tr_groax_launcher_Loader__00024yakuzaLoader
Java_tr_groax_launcher_O_U_N_f__00024yakuzaLoader
Java_tr_groax_launcher_O_U_n_00024c__00024yakuzaLoader
Java_tr_groax_launcher_O_U_n_00024d__00024yakuzaLoader
Java_tr_groax_launcher_O_U_n__00024yakuzaLoader
Java_tr_groax_launcher_X_C__00024yakuzaLoader
Java_tr_groax_launcher_X_G_P__00024yakuzaLoader
Java_tr_groax_launcher_X_G_o__00024yakuzaLoader
Java_tr_groax_launcher_X_I_O__00024yakuzaLoader
Java_tr_groax_launcher_X_I_P__00024yakuzaLoader
Java_tr_groax_launcher_X_K__00024yakuzaLoader
Java_tr_groax_launcher_X_X_g_i__00024yakuzaLoader
Java_tr_groax_launcher_X_X_g_o__00024yakuzaLoader
Java_tr_groax_launcher_X_X_o_A__00024yakuzaLoader
Java_tr_groax_launcher_X_X_o_W_K_W__00024yakuzaLoader
Java_tr_groax_launcher_X_X_o_W_K_j__00024yakuzaLoader
Java_tr_groax_launcher_X_X_o_W_O__00024yakuzaLoader
Java_tr_groax_launcher_X_X_o_W_P__00024yakuzaLoader
Java_tr_groax_launcher_X_X_o_W_n_j__00024yakuzaLoader
Java_tr_groax_launcher_X_X_o_W_n_q__00024yakuzaLoader
Java_tr_groax_launcher_X_X_o_l__00024yakuzaLoader
Java_tr_groax_launcher_X_Z_G__00024yakuzaLoader
Java_tr_groax_launcher_X_Z_o__00024yakuzaLoader
Java_tr_groax_launcher_q_R_G_D_R__00024yakuzaLoader
Java_tr_groax_launcher_q_R_G_D_f_k__00024yakuzaLoader
Java_tr_groax_launcher_q_R_G_D_i_u_F__00024yakuzaLoader
Java_tr_groax_launcher_q_R_G_D_i_u_u_U__00024yakuzaLoader
Java_tr_groax_launcher_q_R_G_D_i_w__00024yakuzaLoader
Java_tr_groax_launcher_q_R_G_G__00024yakuzaLoader
Java_tr_groax_launcher_q_R_G_t__00024yakuzaLoader
Java_tr_groax_launcher_q_R_h_00024d__00024yakuzaLoader
Java_tr_groax_launcher_q_R_h__00024yakuzaLoader
Java_tr_groax_launcher_q_w__00024yakuzaLoader
Java_tr_groax_s_j__00024yakuzaLoader
Java_tr_groax_u_b__00024yakuzaLoader

Sections

UPX0
Size: - Virtual size: 516KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YakuzaLoader/loader.jar
.jar
YakuzaLoader/run.bat
YakuzaLoader/setup.bat
.bat .vbs

Sharing

General

Malware Config

Signatures

Files

Password: yakuza_2024

Password: yakuza_2024

Password: yakuza_2024

Password: yakuza_2024

Password: yakuza_2024

Password: yakuza_2024

Password: yakuza_2024

Password: yakuza_2024

Password: yakuza_2024

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 516KB

UPX1 Size: 156KB - Virtual size: 156KB

UPX2 Size: 4KB - Virtual size: 4KB

UPX0
Size: - Virtual size: 516KB

UPX1
Size: 156KB - Virtual size: 156KB

UPX2
Size: 4KB - Virtual size: 4KB