General

  • Target
    yubx-ui.exe
  • Size 29.5MB
  • Sample261024-qsbttsvsfw
  • SHA256 9bc35fccafae693b1f16f427feb4560380377156a7321ed07986add39a9ee5d0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      yubx-ui.exe
    • Size 29.5MB
    • SHA256 9bc35fccafae693b1f16f427feb4560380377156a7321ed07986add39a9ee5d0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Network Share Discovery

      Attempt to gather information on host network.

    • Obfuscated Files or Information: Command Obfuscation

      Adversaries may obfuscate content during command execution to impede detection.

MITRE ATT&CK Enterprise v16

Tasks