YUB-X UI (1).rar
- SHA256 4f4fb1ead9912d54af7a8f3cb10e014f2ca9a3bf39f41e9dc4e612f0a0261a0d
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
YUB-X/Autoexec.lnk
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
YUB-X/Bin.lnk
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
YUB-X/Scripts.lnk
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
YUB-X/Workspace.lnk
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
YUB-X/YUB-X.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
1 signatures
150 seconds
General
- Target YUB-X UI (1).rar
- Size 28.1MB
- Sample260507-c8jbysat4k
- SHA256 4f4fb1ead9912d54af7a8f3cb10e014f2ca9a3bf39f41e9dc4e612f0a0261a0d
- MD5 a0a177f09fd95421d02bb6c11eab8ef2
- SHA1 2c136e5ae763eed99ce264d59e573154eb660d7a
- SHA512 c0155f3834280d13a30bffe29d6aa5c067e44c6c6737c9bc32d398e52334d3233bd8c63f443a6b33989f03b227838ec30f82f811964a576ccec9802780d3a618
- SSDEEP 786432:JJQeT7087c90VLt7dbw/Y5YWiVkOWYP1tKRaVu8HyBN6FN+Yp:JJdToZQt79wWckOx/yaU16iYp
- TLSH T1C857334BB7B58492FCCB45352D11C33E7866EAF4368FE320F24E936A54356A0DAD40B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/YUB-X/YUB-X.exe
File Explorer
-
YUB-X UI (1).rar.rar 28.1MB
-
YUB-X/Autoexec.lnk.lnk 2KB
-
YUB-X/Bin.lnk.lnk 2KB
-
YUB-X/Scripts.lnk.lnk 2KB
-
YUB-X/Workspace.lnk.lnk 2KB
-
YUB-X/YUB-X.exe.exe 34.1MB
YUB-X/Autoexec.lnk
- SHA256 805acb922cb7c75b5227e0a65f561bbd63fb6b3201eed6edc6fe8e6a55e95b37
- MD5 468b669ce86e8049e1a6a9bf60fb7848
- SHA1 69e196479fb793067e65ff481268bcfb11414247
- SHA512 341c7200919f6c93c7c14c0373e34b8a4b7db5deb7d3b817329939b57456d97d048bdae3e08f9d42e29e55dfcf1fa22ef2aad1cf5bfd2829d5ef4330b68bff9b
- TLSH T1E14111054FD74A10C3BFC87C5AAF7198DB73B512F7511A0C814842892862901ED26B0F
- MD5 SHA1 SHA512 TLSH
YUB-X/Bin.lnk
- SHA256 97bd6532c879043d25dfae53bc02917dead69faa020d9ce5a6da64420e485a39
- MD5 12dd450e731aee14dec53f2a6265dc3b
- SHA1 591c9ee237cd6c52a792215ae1fe52e9d46d0893
- SHA512 c7cb4573a7dd186998be2ea1d06c0d4a72a4099a90e86fd3c9097371e3e0ac19a4240573cce9f50ac4383eba0e689971f3c7d665b0fac4dd3ce7359209894baf
- TLSH T1C941541126EA4713D7FF88B422FB75B4C739F752FA914A14814541942DA1A01ED25F1F
- MD5 SHA1 SHA512 TLSH
YUB-X/Scripts.lnk
- SHA256 175ba47374a454c690258b0d9d25b81c2133d0deccf9e5f1a9993c8ecf24099b
- MD5 12b71bcec9cb8254176a8d2408ba7468
- SHA1 93d38ee0a0cc454c0a496ce69a660666db73cdeb
- SHA512 c17c706a5cdb77864ae5a88af6407227686fa995db7ec334f7a5a121a9afb4a54ff60a8acfe07622ed3870766d70ec9dbe08739926b2b9113ffff6a5bf1315d7
- TLSH T1EB4140102ADA4722E3FF8CB512FB7660CA29A792FE824A18818500952DA1B15DC34B0F
- MD5 SHA1 SHA512 TLSH
YUB-X/Workspace.lnk
- SHA256 c3b114113a0a521512ac112022f070b15485acafbc1d07d33762ab478707abe8
- MD5 578b4d5d76099469a6ee248603fe31c2
- SHA1 0d725c0b4d93db83f5ecbc9a6581decab3287323
- SHA512 7c15d37163d9acb7007d04800d7a10d4b8ecb3b78198111c9884df4415c209498818963fe75962c272c76cca568bb95ef90ea9ce72c014ab8c353758b3196dab
- TLSH T1CC4156015BD74A20D37FD8786AEF7295CB397611FB415A588058424918B2F80DD37B0F
- MD5 SHA1 SHA512 TLSH
YUB-X/YUB-X.exe
- IMPHASH 53dc11e2a03a190a6a90e83186f54f43
- SHA256 c42f39bb6b79c2d03300c05d1e3beca84fc9bc31a26a8f07900fd0e70eda441b
- MD5 5fa5a7abbfcfe01a6ac98e6fec7fd9dc
- SHA1 30b0d6085bb02545e28cd3a92fba250967981a2a
- SHA512 e80181ac7d5c8864f2a455c936f75f1afa36233d4b2f1d6a1be76b3a8bead3ba8958cc04cd975fa222a86645cf9a1dabc8dfc1e55d500fbdb89af4b9e42ec881
- SSDEEP 786432:6sogU+vXqs1axPevBBJ0iklZi8WcwKzH80nXOjd+SxC9EToH7:6so9+CsGP41NNcwAH8+XOjUZH
- TLSH T16677238565E592ACC0C1C238D68E1AFAE1C878F98DBE852FBFCB58023531D55CCE6935
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
34605957
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
bcryptprimitives
ProcessPrng
ntdll
RtlGetVersion
kernel32
RaiseException
SetEnvironmentVariableW
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
user32
MapVirtualKeyExW
gdi32
CreateRectRgn
dwmapi
DwmSetWindowAttribute
oleaut32
SetErrorInfo
ole32
RevokeDragDrop
comctl32
TaskDialogIndirect
shell32
CommandLineToArgvW
SHOpenFolderAndSelectItems
shlwapi
SHCreateMemStream
advapi32
RegQueryValueExW
EventUnregister
ws2_32
shutdown
crypt32
CertSetCertificateContextProperty
psapi
GetModuleFileNameExW
powrprof
CallNtPowerInformation
pdh
PdhRemoveCounter
api-ms-win-crt-math-l1-1-0
trunc
api-ms-win-crt-string-l1-1-0
strcpy_s
api-ms-win-crt-convert-l1-1-0
strtol
api-ms-win-crt-runtime-l1-1-0
terminate
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-stdio-l1-1-0
__p__commode
api-ms-win-crt-heap-l1-1-0
calloc
api-ms-win-crt-utility-l1-1-0
bsearch
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
aws_lc_0_40_0_jent_entropy_collector_alloc
aws_lc_0_40_0_jent_entropy_collector_free
aws_lc_0_40_0_jent_entropy_init
aws_lc_0_40_0_jent_entropy_init_ex
aws_lc_0_40_0_jent_entropy_switch_notime_impl
aws_lc_0_40_0_jent_read_entropy
aws_lc_0_40_0_jent_read_entropy_safe
aws_lc_0_40_0_jent_set_fips_failure_callback
aws_lc_0_40_0_jent_version
Name
.text
Size
Virtual Size
7.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
4.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
116KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.+zP
Size
Virtual Size
18.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.Z(T
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.1~E
Size
34.1MB
Virtual Size
34.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
62KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ