Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

Device/Har...er.exe

windows7-x64

8

Device/Har...er.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    UVUpdater.exe

  • Size

    3.3MB

  • Sample

    230606-k326wach63

  • MD5

    30cc32fd3f720b65b020270aa362d3aa

  • SHA1

    eb369216ae6ce8ec0d2d399d3e811ba219c45cd9

  • SHA256

    5c609b570ee6163fd7d63eaff862db53c71ec6fc4c568cf71c8500ad3f2defdf

  • SHA512

    3024ff76066436d675531027d2f16fb223df894941d4b17dd32f17d615689defcea0f1e2c5b52aaf138904920952a67bc924cac1eb25395b5f3d880935edf5c3

  • SSDEEP

    49152:p5ZAv828fQ1pM8D8fdGnqHrqRpCinGV3VQFcZQZKkLiSrZCgwMLlmmZs:p5Sv828fE/iGqHrGpZnGVl+LtrZCSbq

Score
8/10
discoveryevasionupx

Malware Config

Targets

    • Target

      Device/HarddiskVolume2/Program Files (x86)/UltraViewer/Update/UVUpdater.exe

    • Size

      3.4MB

    • MD5

      9f6011cda9bd22412484a0fc33e7ca8a

    • SHA1

      136b33e3e335d0c2901fb7b85fe26fc5e88445d5

    • SHA256

      8f4f9a43bbfbe3b842a5cdd7cbc621f0171bafda89e3b88310ec473e9a56eae0

    • SHA512

      3ade22ddd54506b510ec04300bc9fb4a8618a224806b3779e3e007fbfe33b5ce12ff741029d7ad17b0574ef980a39e519d48da964122bfffab1939dfe77b34f7

    • SSDEEP

      98304:E5zZ80gsEX+Ljsp0d8DgI4vacQx+wOWj9ViPm:Ef80gsl3s1gFvQ+oRcm

    Score
    8/10
    evasiondiscoveryupx

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks