97bd6532c879043d25dfae53bc02917dead69faa020d9ce5a6da64420e485a39

Analysis

max time kernel
149s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/05/2026, 12:13

Target
YUB-X/Bin.lnk
Size 2KB
Sample260517-pdvgysf131
SHA256 97bd6532c879043d25dfae53bc02917dead69faa020d9ce5a6da64420e485a39
MD5 12dd450e731aee14dec53f2a6265dc3b
SHA1 591c9ee237cd6c52a792215ae1fe52e9d46d0893
SHA512 c7cb4573a7dd186998be2ea1d06c0d4a72a4099a90e86fd3c9097371e3e0ac19a4240573cce9f50ac4383eba0e689971f3c7d665b0fac4dd3ce7359209894baf
TLSH
T1C941541126EA4713D7FF88B422FB75B4C739F752FA914A14814541942DA1A01ED25F1F
MD5 SHA1 SHA512 TLSH

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	cmd.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	cmd.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\YUB-X\Bin.lnk
1⤵
- Modifies registry class
PID:2416

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact