Analysis
- max time kernel
150s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
21/07/2026, 11:41
General
- Target SoftHub/SoftHub.exe
- Size 93.3MB
- Sample260721-ntldjset6k
- SHA256 430b7b1a40143e04e84378b7d14936c6ae6dedd33fac2cad461d9b98b42ca2e7
Malware Config
Signatures
- Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Maps connected drives based on registry 3 TTPs 3 IoCs
Disk information is often read in order to detect sandboxing environments.
- Checks SCSI registry key(s) 3 TTPs 4 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Checks processor information in registry 2 TTPs 24 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SoftHub\SoftHub.exe"C:\Users\Admin\AppData\Local\Temp\SoftHub\SoftHub.exe"1⤵
- Maps connected drives based on registry
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/716-0-0x000002BAEFB22000-0x000002BAEFB23000-memory.dmp
memory/716-1-0x000002BAEFB20000-0x000002BAEFB21000-memory.dmp
memory/716-3-0x000002BAEFB24000-0x000002BAEFB25000-memory.dmp
memory/716-2-0x000002BAEFB23000-0x000002BAEFB24000-memory.dmp
memory/716-7-0x000002BAEFB26000-0x000002BAEFB28000-memory.dmp
memory/716-5-0x000002BAEFB25000-0x000002BAEFB26000-memory.dmp
memory/716-6-0x000002BAEFB21000-0x000002BAEFB22000-memory.dmp
memory/716-21-0x000002BAEFB28000-0x000002BAEFB29000-memory.dmp
memory/716-22-0x000002BAEFB29000-0x000002BAEFB2A000-memory.dmp
memory/716-24-0x000002BAEFB2A000-0x000002BAEFB2B000-memory.dmp
memory/716-41-0x000002BAEFB2C000-0x000002BAEFB2E000-memory.dmp
memory/716-40-0x000002BAEFB22000-0x000002BAEFB23000-memory.dmp
memory/716-39-0x000002BAEFB2B000-0x000002BAEFB2C000-memory.dmp
memory/716-38-0x000002BB2FB1D000-0x000002BB2FB1E000-memory.dmp
memory/716-44-0x000002BAEFB2F000-0x000002BAEFB30000-memory.dmp
memory/716-43-0x000002BAEFB2E000-0x000002BAEFB2F000-memory.dmp
memory/716-42-0x000002BAEFB24000-0x000002BAEFB25000-memory.dmp
memory/716-46-0x000002BAEFB30000-0x000002BAEFB31000-memory.dmp
memory/716-47-0x000002BAEFB31000-0x000002BAEFB32000-memory.dmp
memory/716-45-0x000002BAEFB26000-0x000002BAEFB28000-memory.dmp
memory/716-48-0x000002BAEFB28000-0x000002BAEFB29000-memory.dmp
memory/716-49-0x000002BAEFB32000-0x000002BAEFB33000-memory.dmp
memory/716-50-0x000002BAEFB29000-0x000002BAEFB2A000-memory.dmp
memory/716-51-0x000002BAE1000000-0x000002BAE2000000-memory.dmp
memory/716-53-0x000002BAEFB34000-0x000002BAEFB35000-memory.dmp
memory/716-52-0x000002BAEFB33000-0x000002BAEFB34000-memory.dmp
memory/716-56-0x000002BAEFB38000-0x000002BAEFB39000-memory.dmp
memory/716-55-0x000002BAEFB35000-0x000002BAEFB36000-memory.dmp
memory/716-54-0x000002BAEFB36000-0x000002BAEFB38000-memory.dmp
memory/716-77-0x000002BAEFB42000-0x000002BAEFB43000-memory.dmp
memory/716-76-0x000002BAEFB41000-0x000002BAEFB42000-memory.dmp
memory/716-75-0x000002BAEFB40000-0x000002BAEFB41000-memory.dmp
memory/716-74-0x000002BAEFB3F000-0x000002BAEFB40000-memory.dmp
memory/716-73-0x000002BAEFB3E000-0x000002BAEFB3F000-memory.dmp
memory/716-72-0x000002BAEFB3D000-0x000002BAEFB3E000-memory.dmp
memory/716-71-0x000002BAEFB3C000-0x000002BAEFB3D000-memory.dmp
memory/716-70-0x000002BAEFB3B000-0x000002BAEFB3C000-memory.dmp
memory/716-69-0x000002BAEFB3A000-0x000002BAEFB3B000-memory.dmp
memory/716-68-0x000002BAEFB39000-0x000002BAEFB3A000-memory.dmp
memory/716-78-0x000002BAE1000000-0x000002BAE2000000-memory.dmp
memory/716-79-0x000002BAEFB43000-0x000002BAEFB44000-memory.dmp
memory/716-80-0x000002BAE1000000-0x000002BAE2000000-memory.dmp
memory/716-81-0x000002BAE1000000-0x000002BAE2000000-memory.dmp
memory/716-82-0x000002BAEFB45000-0x000002BAEFB46000-memory.dmp
memory/716-83-0x000002BAEFB46000-0x000002BAEFB47000-memory.dmp
memory/716-84-0x000002BAE1000000-0x000002BAE2000000-memory.dmp
memory/716-85-0x000002BAE1000000-0x000002BAE2000000-memory.dmp
memory/716-86-0x000002BAE1000000-0x000002BAE2000000-memory.dmp
memory/716-87-0x000002BAE1000000-0x000002BAE2000000-memory.dmp