Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

Device/Har...er.exe

windows7-x64

8

Device/Har...er.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    UVUpdater.exe

  • Size

    3.3MB

  • Sample

    230603-q79dmshc71

  • MD5

    b8df959b1ca67a992c8c18776e720451

  • SHA1

    54f568d84af91ec1a30e5c196a6a36ef7263b9a4

  • SHA256

    bd997f7c5c621a9f9a2e32da00ba3fe3b357ad96d01530da4d6bb7a93733ccf6

  • SHA512

    4a60fbdefb3b0ca1b1806abf98b769b2d00ab60baaaf3e0fcb0843a31e322dea59c092981cf362b34f65b236e37f708db9bf0fbac76758d157e1a479c4c74bfb

  • SSDEEP

    98304:HYDQZYKvA60TjQak828qtt+Yme7wioxzGGFiHx1uCw:HYDQZtAvQN80MLzGHa9

Score
8/10
discoveryevasionupx

Malware Config

Targets

    • Target

      Device/HarddiskVolume5/Program Files (x86)/UltraViewer/Update/UVUpdater.exe

    • Size

      3.4MB

    • MD5

      9f6011cda9bd22412484a0fc33e7ca8a

    • SHA1

      136b33e3e335d0c2901fb7b85fe26fc5e88445d5

    • SHA256

      8f4f9a43bbfbe3b842a5cdd7cbc621f0171bafda89e3b88310ec473e9a56eae0

    • SHA512

      3ade22ddd54506b510ec04300bc9fb4a8618a224806b3779e3e007fbfe33b5ce12ff741029d7ad17b0574ef980a39e519d48da964122bfffab1939dfe77b34f7

    • SSDEEP

      98304:E5zZ80gsEX+Ljsp0d8DgI4vacQx+wOWj9ViPm:Ef80gsl3s1gFvQ+oRcm

    Score
    8/10
    evasiondiscoveryupx

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks