Analysis
- max time kernel
82s - max time network
87s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260130-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260130-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
07/05/2026, 02:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
YUB-X/Autoexec.lnk
Resource
win10ltsc2021-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
YUB-X/Bin.lnk
Resource
win10ltsc2021-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
YUB-X/Scripts.lnk
Resource
win10ltsc2021-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
YUB-X/Workspace.lnk
Resource
win10ltsc2021-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
YUB-X/YUB-X.exe
Resource
win10ltsc2021-20260130-en
1 signatures
150 seconds
General
- Target YUB-X/Workspace.lnk
- Size 2KB
- Sample260507-c8jbysat4k
- SHA256 c3b114113a0a521512ac112022f070b15485acafbc1d07d33762ab478707abe8
- MD5 578b4d5d76099469a6ee248603fe31c2
- SHA1 0d725c0b4d93db83f5ecbc9a6581decab3287323
- SHA512 7c15d37163d9acb7007d04800d7a10d4b8ecb3b78198111c9884df4415c209498818963fe75962c272c76cca568bb95ef90ea9ce72c014ab8c353758b3196dab
- TLSH T1CC4156015BD74A20D37FD8786AEF7295CB397611FB415A588058424918B2F80DD37B0F
- MD5 SHA1 SHA512 TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 5 IoCs
description ioc Process Set value (data) \REGISTRY\USER\S-1-5-21-2605425648-1229640847-2920638550-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02 cmd.exe Set value (data) \REGISTRY\USER\S-1-5-21-2605425648-1229640847-2920638550-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff cmd.exe Key created \REGISTRY\USER\S-1-5-21-2605425648-1229640847-2920638550-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2605425648-1229640847-2920638550-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell cmd.exe Key created \REGISTRY\USER\S-1-5-21-2605425648-1229640847-2920638550-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU cmd.exe