Malicious
dnYara-master.zip
ZIP Archive
MD5: 158f82914ae8620a0f035a0e5ae415a1
Size: 368.62 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
368.62 KB · 368,615 B
First seen
2026-07-10 11:28 · 3 months ago
Last seen
2026-07-10 11:28 · 3 months ago
Last analysis
2026-07-12 23:12 · 3 months ago
Hashes
MD5
158f82914ae8620a0f035a0e5ae415a1
Sha1
31a90c771286c0b38edb84185046dad5ac3e9753
Sha256
0034c2660d7e55831052cf3b111509564c8575922f0f8c68913faa4bb9e20775
Sha384
f3219242f1319483c05382c626c011b92822ba975d99e55dbde8f48bf0a63007375ddb9c9689756b05f448d875846661
Sha512
bac3bf01b5c1aaf4e0f3de6f760040f82fa681d4431867b946803eec38815a81cc6fdd170c83d39987fe4f407e44a1e3fa1767fedb755b34334ebf07a93de04b
SSDeep
6144:ywHyoJEOvVYafvlYJPuDgQ9b9RomWT1kCZuaw4MHHlZFnNbQjRwRdY3+d:pyojW0GGDg49aDTFE4MHF31QjIdWW
TLSH
5D740208F58F3FF5FEE271BC286E922696459094119C6DE7C3F78574189B0292EB07AC
5 malicious · 94 files
ZIPdnYara-master.zipT1027 · T1059.001
BINdnYara-master
BIN.gitattributes
BIN.github
BINworkflows
YMLcodeql-analysis.yml
YMLdotnetcore.yml
BIN.gitignore
BIN.gitmodules
MDINTEROP.md
BINLICENSE
BINLibraries
BINdnYara.Interop
BINInterops
CSConstants.cs
CSDelegates.cs
BINEnums
CSYR_CALLBACK_MESSAGE.cs
CSYR_CALLBACK_RESULT.cs
CSYR_SCAN_FLAGS.cs
PS1Methods.csT1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
CSObjRefHelper.cs
BINTypes
CSFILE.cs
CSRE_AST.cs
CSRE_CLASS.cs
CSRE_NODE.cs
CSRE_NODE_UNION1.cs
CSRE_NODE_UNION2.cs
CSSETJMP_FLOAT128.cs
CSTypes.cs
CSYARA_ERROR.cs
CSYR_AC_MATCH.cs
CSYR_AC_MATCH_TABLE_ENTRY.cs
CSYR_ARENA.cs
CSYR_ARENA_PAGE.cs
CSYR_ATOMS_CONFIG.cs
CSYR_ATOM_QUALITY_TABLE_ENTRY.cs
CSYR_COMPILER.cs
CSYR_CONFIG_NAME.cs
CSYR_MATCH.cs
CSYR_MATCHES.cs
CSYR_META.cs
CSYR_OBJ_REF.cs
CSYR_PROFILING_INFO.cs
CSYR_RELOC.cs
CSYR_RULE.cs
CSYR_RULES.cs
CSYR_SCAN_CONTEXT.cs
CSYR_STOPWATCH.cs
CSYR_STRING.cs
BINdnYara.Interop.csproj
BINdnYara.NativePack
BINdnYara.NativePack.csproj
DLLlibyara.dll
Structure
BINResources
BINRT_MANIFEST
BINID:0002
BINID:1033
EXPlibyara.exp
LIBlibyara.lib
MDREADME.md
BINResources
IMGyara-interactive.png
IMGyara-interactive.png-preview.png
BINSamples
BINSimpleSample
BINApp.config
CSProgram.cs
BINProperties
CSAssemblyInfo.cs
BINSimpleSample.csproj
BINYaraInteractive
CSCmdHandler.cs
CSProgram.cs
BINYaraInteractive.csproj
BINUnitTests
BINdnYara.UnitTests
CSScanTests.cs
BINdnYara.UnitTests.csproj
BATbuild_yara.bat
SLNdnYara.sln
BINdnYara
CSCompiledRules.cs
CSCompiler.cs
CSCustomScanner.cs
CSErrorUtility.cs
BINExceptions
CSCompilationException.cs
CSExceptions.cs
CSYaraContextNotInitializedException.cs
CSYaraException.cs
CSExternalVariables.cs
BINHandlers
CSGCHandleHandler.cs
CSPosixFileHandler.cs
CSMatch.cs
CSProfilingInfo.cs
CSRule.cs
CSScanHelper.cs
CSScanResult.cs
CSScanner.cs
CSUtil.cs
CSYaraContext.cs
BINdnYara.csproj
BINlibs
BINcmake
TXTCMakeLists.txt
MDREADME.md
BINjansson.cmake
BINlibyara.cmake
BINyara.cmake
INyara.pc.in
BINyarac.cmake
BINyaratest.cmake
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
4 / 4
Path
arc:zip>arc:entry>pe:dll>pe:rsrc>bin
Shape
arc:zip>arc:entry>pe:dll>pe:rsrc>bin
malicious
5 nodes
Path
arc:zip>arc:entry>bin
Shape
arc:zip>arc:entry>bin
malicious
3 nodes
5 malicious · 94 files
ZIPdnYara-master.zipT1027 · T1059.001
BINdnYara-master
BIN.gitattributes
BIN.github
BIN.gitignore
BIN.gitmodules
MDINTEROP.md
BINLICENSE
BINLibraries
BINdnYara.Interop
BINInterops
CSConstants.cs
CSDelegates.cs
BINEnums
PS1Methods.csT1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
CSObjRefHelper.cs
BINTypes
BINdnYara.Interop.csproj
BINdnYara.NativePack
MDREADME.md
BINResources
BINSamples
BINUnitTests
BATbuild_yara.bat
SLNdnYara.sln
BINdnYara
BINlibs
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account