Overview
overview
5Static
static
3YUB-X/Autoexec.lnk
windows10-2004-x64
3YUB-X/Autoexec.lnk
windows11-21h2-x64
3YUB-X/Bin.lnk
windows10-2004-x64
3YUB-X/Bin.lnk
windows11-21h2-x64
3YUB-X/Scripts.lnk
windows10-2004-x64
3YUB-X/Scripts.lnk
windows11-21h2-x64
3YUB-X/Workspace.lnk
windows10-2004-x64
3YUB-X/Workspace.lnk
windows11-21h2-x64
3YUB-X/YUB-X.exe
windows10-2004-x64
5YUB-X/YUB-X.exe
windows11-21h2-x64
5Analysis
- max time kernel
149s - max time network
153s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
17/05/2026, 12:13
Static task
static1
Behavioral task
behavioral1
Sample
YUB-X/Autoexec.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
YUB-X/Autoexec.lnk
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
YUB-X/Bin.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
YUB-X/Bin.lnk
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
YUB-X/Scripts.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
YUB-X/Scripts.lnk
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
YUB-X/Workspace.lnk
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
YUB-X/Workspace.lnk
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
YUB-X/YUB-X.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
YUB-X/YUB-X.exe
Resource
win11-20260513-en
General
- Target YUB-X/Autoexec.lnk
- Size 2KB
- Sample260517-pdvgysf131
- SHA256 805acb922cb7c75b5227e0a65f561bbd63fb6b3201eed6edc6fe8e6a55e95b37
- MD5 468b669ce86e8049e1a6a9bf60fb7848
- SHA1 69e196479fb793067e65ff481268bcfb11414247
- SHA512 341c7200919f6c93c7c14c0373e34b8a4b7db5deb7d3b817329939b57456d97d048bdae3e08f9d42e29e55dfcf1fa22ef2aad1cf5bfd2829d5ef4330b68bff9b
- TLSH T1E14111054FD74A10C3BFC87C5AAF7198DB73B512F7511A0C814842892862901ED26B0F
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 5 IoCs
description ioc Process Set value (data) \REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots cmd.exe Set value (data) \REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff cmd.exe Key created \REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell cmd.exe Key created \REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU cmd.exe