Overview

overview

8

Static

static

1

Device/Har...er.exe

windows7-x64

8

Device/Har...er.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    UVUpdater.exe

  • Size

    3.3MB

  • Sample

    230607-gm3kxshe8z

  • MD5

    dd9c6173b01656f17290ec7fdfe532b6

  • SHA1

    3dc026141cc80b54faf7b55e3c78c013a9a71d3e

  • SHA256

    615e7042bd8538ab3a9da7b33ce13b0d5ff76083def60a67e89de335da8d6293

  • SHA512

    b2d376bbb7943e553c49306ecea043afb12aca547ff9f6c6d266a45dfd01c8f31cb7ab89f45975d3553fb8c1bc6f087569036eee5fe350ffa26b1663c9304c3b

  • SSDEEP

    98304:NlxXV/QV2jf5pkCAblPT/82cb79of5yewKv9ar8DIZNXqiKw:rNV4VkXAxT82woBy969ar8DIZETw

Score
8/10
discoveryevasionupx

Malware Config

Targets

    • Target

      Device/HarddiskVolume5/Program Files (x86)/UltraViewer/Update/UVUpdater.exe

    • Size

      3.4MB

    • MD5

      9f6011cda9bd22412484a0fc33e7ca8a

    • SHA1

      136b33e3e335d0c2901fb7b85fe26fc5e88445d5

    • SHA256

      8f4f9a43bbfbe3b842a5cdd7cbc621f0171bafda89e3b88310ec473e9a56eae0

    • SHA512

      3ade22ddd54506b510ec04300bc9fb4a8618a224806b3779e3e007fbfe33b5ce12ff741029d7ad17b0574ef980a39e519d48da964122bfffab1939dfe77b34f7

    • SSDEEP

      98304:E5zZ80gsEX+Ljsp0d8DgI4vacQx+wOWj9ViPm:Ef80gsl3s1gFvQ+oRcm

    Score
    8/10
    evasiondiscoveryupx

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks