General

  • Target

    Hoya Workin.zip

  • Size

    4.3MB

  • MD5

    43e482a42964dc03369340cea6e1e0de

  • SHA1

    0f9ca7801ef6451e2be74d932d549b4421c01b88

  • SHA256

    46f328da19171cc8b7ae0dcabbff39a39fed8b276d993cc971c870d9e6fdb891

  • SHA512

    52692faf60033b9cac0c843b949491a9d31a31a16750b07a5cfaa484f178c121c74315d58331502b9d7538c7ac46f88d503487b559db13064b2e8892e02ec9d7

  • SSDEEP

    98304:6+unxDDcESW42uVdTWjPEG4tRZz+fza/QnkKiKp4cgk6sqjo2uTPQ:HuDNqhkPyHB+e/7JhuU

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • Hoya Workin.zip
    .zip
  • Debug/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Debug/Hoya.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Debug/Hoya.exe.config
  • Debug/Hoya.pdb
  • Debug/YourScripts/jqpqn.txt
  • Debug/YourScripts/testing.txt
  • Debug/YourScripts/w tesy.txt
  • Debug/bin/Xeno.dll
    .dll windows:6 windows x64 arch:x64

    3a1f9d973bff43051a3daf411f707362


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections

  • Debug/cxapis.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • Debug/workspace/.tests/appendfile.txt
  • Debug/workspace/.tests/getcustomasset.txt
  • Debug/workspace/.tests/isfile.txt
  • Debug/workspace/.tests/listfiles/test_1.txt
  • Debug/workspace/.tests/listfiles/test_2.txt
  • Debug/workspace/.tests/loadfile.txt
  • Debug/workspace/.tests/readfile.txt
  • Debug/workspace/.tests/writefile
  • Debug/workspace/.tests/writefile.txt
  • Debug/workspace/Aurora/config.json
  • Debug/workspace/IY_FE.iy
  • Debug/workspace/dex/deps_version.dat
  • Debug/workspace/dex/rbx_api.dat
  • Debug/workspace/dex/rbx_rmd.dat