Overview
overview
8Static
static
5YimMenu Legacy.zip
windows10-2004-x64
1YimMenu Legacy.zip
windows11-ltsc_2024-x64
1YimMenu Le...or.exe
windows10-2004-x64
5YimMenu Le...or.exe
windows11-ltsc_2024-x64
8YimMenu Le...V2.bat
windows10-2004-x64
3YimMenu Le...V2.bat
windows11-ltsc_2024-x64
3YimMenu Le...os.zip
windows10-2004-x64
1YimMenu Le...os.zip
windows11-ltsc_2024-x64
8Xenos/Xenos64.exe
windows10-2004-x64
8Xenos/Xenos64.exe
windows11-ltsc_2024-x64
8YimMenu Le...nu.dll
windows10-2004-x64
1YimMenu Le...nu.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
898s - max time network
427s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
04/08/2026, 13:20
Static task
static1
Behavioral task
behavioral1
Sample
YimMenu Legacy.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
YimMenu Legacy.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
YimMenu Legacy/KAPTAN_KAPLAN injector.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
YimMenu Legacy/KAPTAN_KAPLAN injector.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
YimMenu Legacy/Ultimate_Menu_V2.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
YimMenu Legacy/Ultimate_Menu_V2.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
YimMenu Legacy/Xenos.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
YimMenu Legacy/Xenos.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Xenos/Xenos64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Xenos/Xenos64.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
YimMenu Legacy/YimMenu.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
YimMenu Legacy/YimMenu.dll
Resource
win11ltsc2024-20260709-en
General
- Target YimMenu Legacy/KAPTAN_KAPLAN injector.exe
- Size 1.5MB
- Sample260804-qljk4axyas
- SHA256 f09c860ec6aed94872c98c5a1930b852a81b5d037619d0fae56e99162a4a6981
- MD5 07d3107978f1557d98ff2d8023307812
- SHA1 c38fda7c76f355743e4b0ab75300b91012e62aac
- SHA512 ca2a4101cecc9a298e17d73c8adc1a71086d49111ccb7ff643c83aae0049c70eb57f2d7e2a899cce04dd2de487ce8ebf3712613f41a25c714a30535d8bf83be3
- SSDEEP 24576:AGUFwIphyxytbWzJOrfMpuqcZJhrFQcCPbnGwvbq2CwBQbL0RJ7zAyVRnC6N/G:MFpphyYtbVMpOL5QrjnGwvmbLo9zAKn0
- TLSH T18375DF430A178E8BD13273FC5158FB9D416647E4B8278BA4EC792252EAD4F876D3E1E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- ConfuserEx .NET packer 2 IoCs
Detects ConfuserEx .NET packer.
resource yara_rule behavioral3/memory/4536-0-0x000001C77E960000-0x000001C77EAE0000-memory.dmp ConfuserEx behavioral3/memory/4536-1-0x000001C77FB60000-0x000001C77FCD8000-memory.dmp ConfuserEx