805acb922cb7c75b5227e0a65f561bbd63fb6b3201eed6edc6fe8e6a55e95b37

Analysis

user interaction
yes
max time kernel
98s
max time network
101s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260130-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260130-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
07/05/2026, 02:44

Target
YUB-X/Autoexec.lnk
Size 2KB
Sample260507-c8jbysat4k
SHA256 805acb922cb7c75b5227e0a65f561bbd63fb6b3201eed6edc6fe8e6a55e95b37
MD5 468b669ce86e8049e1a6a9bf60fb7848
SHA1 69e196479fb793067e65ff481268bcfb11414247
SHA512 341c7200919f6c93c7c14c0373e34b8a4b7db5deb7d3b817329939b57456d97d048bdae3e08f9d42e29e55dfcf1fa22ef2aad1cf5bfd2829d5ef4330b68bff9b
TLSH
T1E14111054FD74A10C3BFC87C5AAF7198DB73B512F7511A0C814842892862901ED26B0F
MD5 SHA1 SHA512 TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 5 IoCs

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-3579476765-2645189491-1706875375-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	cmd.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3579476765-2645189491-1706875375-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3579476765-2645189491-1706875375-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3579476765-2645189491-1706875375-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3579476765-2645189491-1706875375-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\YUB-X\Autoexec.lnk
1⤵
- Modifies registry class
PID:2228

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact