Overview
overview
5Static
static
3YUB-X/Autoexec.lnk
windows10-2004-x64
3YUB-X/Autoexec.lnk
windows11-21h2-x64
3YUB-X/Bin.lnk
windows10-2004-x64
3YUB-X/Bin.lnk
windows11-21h2-x64
5YUB-X/Scripts.lnk
windows10-2004-x64
3YUB-X/Scripts.lnk
windows11-21h2-x64
3YUB-X/Workspace.lnk
windows10-2004-x64
3YUB-X/Workspace.lnk
windows11-21h2-x64
3YUB-X/YUB-X.exe
windows10-2004-x64
5YUB-X/YUB-X.exe
windows11-21h2-x64
5General
- Target YUB-X UI.rar
- Size 26.7MB
- Sample260417-wxqrfae12r
- SHA256 e1e06e2c6af1b0654a9c07e28411185467ac846aa1e5daa79900d3412076f66c
- MD5 b71263ee503f14003cc04e548e2f68f6
- SHA1 03ed7d2396a6b2f8d108b91a9145e75d4df83151
- SHA512 129a664c947533485ee26c28edbd6996ac75487175cffaac879d20db0875cb4689a429a224acb24cca09f4529c9277f0c840d5d839703d2f40199d8ca6e5fd40
- SSDEEP 786432:BR/oy2llFdejcblxOPH1AJ1RcKp4rX6pk/i:cy2lNejEOE1Rcu4rmkK
- TLSH T1115733A862D9CE17A2D7F011439DE89893012B6D48E56B7259C47EB25012DF7E2FC3CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
YUB-X/Autoexec.lnk
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
YUB-X/Autoexec.lnk
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
YUB-X/Bin.lnk
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
YUB-X/Bin.lnk
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
YUB-X/Scripts.lnk
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
YUB-X/Scripts.lnk
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
YUB-X/Workspace.lnk
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
YUB-X/Workspace.lnk
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
YUB-X/YUB-X.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
YUB-X/YUB-X.exe
Resource
win11-20260130-en
Malware Config
Targets
-
- Target YUB-X/Autoexec.lnk
- Size 2KB
- SHA256 805acb922cb7c75b5227e0a65f561bbd63fb6b3201eed6edc6fe8e6a55e95b37
- MD5 468b669ce86e8049e1a6a9bf60fb7848
- SHA1 69e196479fb793067e65ff481268bcfb11414247
- SHA512 341c7200919f6c93c7c14c0373e34b8a4b7db5deb7d3b817329939b57456d97d048bdae3e08f9d42e29e55dfcf1fa22ef2aad1cf5bfd2829d5ef4330b68bff9b
- TLSH T1E14111054FD74A10C3BFC87C5AAF7198DB73B512F7511A0C814842892862901ED26B0F
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target YUB-X/Bin.lnk
- Size 2KB
- SHA256 97bd6532c879043d25dfae53bc02917dead69faa020d9ce5a6da64420e485a39
- MD5 12dd450e731aee14dec53f2a6265dc3b
- SHA1 591c9ee237cd6c52a792215ae1fe52e9d46d0893
- SHA512 c7cb4573a7dd186998be2ea1d06c0d4a72a4099a90e86fd3c9097371e3e0ac19a4240573cce9f50ac4383eba0e689971f3c7d665b0fac4dd3ce7359209894baf
- TLSH T1C941541126EA4713D7FF88B422FB75B4C739F752FA914A14814541942DA1A01ED25F1F
- MD5 SHA1 SHA512 TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target YUB-X/Scripts.lnk
- Size 2KB
- SHA256 175ba47374a454c690258b0d9d25b81c2133d0deccf9e5f1a9993c8ecf24099b
- MD5 12b71bcec9cb8254176a8d2408ba7468
- SHA1 93d38ee0a0cc454c0a496ce69a660666db73cdeb
- SHA512 c17c706a5cdb77864ae5a88af6407227686fa995db7ec334f7a5a121a9afb4a54ff60a8acfe07622ed3870766d70ec9dbe08739926b2b9113ffff6a5bf1315d7
- TLSH T1EB4140102ADA4722E3FF8CB512FB7660CA29A792FE824A18818500952DA1B15DC34B0F
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target YUB-X/Workspace.lnk
- Size 2KB
- SHA256 c3b114113a0a521512ac112022f070b15485acafbc1d07d33762ab478707abe8
- MD5 578b4d5d76099469a6ee248603fe31c2
- SHA1 0d725c0b4d93db83f5ecbc9a6581decab3287323
- SHA512 7c15d37163d9acb7007d04800d7a10d4b8ecb3b78198111c9884df4415c209498818963fe75962c272c76cca568bb95ef90ea9ce72c014ab8c353758b3196dab
- TLSH T1CC4156015BD74A20D37FD8786AEF7295CB397611FB415A588058424918B2F80DD37B0F
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target YUB-X/YUB-X.exe
- Size 30.9MB
- SHA256 ab3ea164a21866cb906f4a3ab6852221da0705c8c03718d56efa0e3f8a3017de
- MD5 afd03f659e2d953abc8f668708bcc0db
- SHA1 900384d951841cc1b1a81d708428fece73dcbd30
- SHA512 0bccd5d765ab8b2d266b9cd611c1d18966e8f5fd1069a3a1a6c84aaf41cc1728174639ecae506d961291ee9950edc2125eb6b9c950a0dee0269545f869df1fb8
- SSDEEP 786432:JfqKB6DC1UIm2wp0eSns6j71Zmeg3IuJq70QXFV:Jfu/Im2wWzs6H2LJq708FV
- TLSH T18467239B68D461E0C4C3424493CF53DE52E0F17A99E9181D3ACB3C026A25EEB5749FBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger