Overview

overview

8

Static

static

1

Device/Har...er.exe

windows7-x64

8

Device/Har...er.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    UVUpdater.exe

  • Size

    3.3MB

  • Sample

    230608-lrj2laed4v

  • MD5

    176b5d9ae2ef749458c3cc7278aefde9

  • SHA1

    c6c6ca6cdf977b456e729078ebbfe28700012520

  • SHA256

    31bdd5833982bd024f39eb027464971979db7ecb876f536338fb8af57efcd121

  • SHA512

    0686541c6f0a19bdf877dc864eff514aed293e8c51a204532bade50f823d668baf9965cf88a5e441482ff246732e62a77e283b90086137ab100f8ecbb0bf2faf

  • SSDEEP

    49152:75ZAv828fQ1pM8D8fdGnqHrqRpCinGV3VQFcZQZKkLiSrZCgwMLlmmZR:75Sv828fE/iGqHrGpZnGVl+LtrZCSbb

Score
8/10
discoveryevasionupx

Malware Config

Targets

    • Target

      Device/HarddiskVolume4/Program Files (x86)/UltraViewer/Update/UVUpdater.exe

    • Size

      3.4MB

    • MD5

      9f6011cda9bd22412484a0fc33e7ca8a

    • SHA1

      136b33e3e335d0c2901fb7b85fe26fc5e88445d5

    • SHA256

      8f4f9a43bbfbe3b842a5cdd7cbc621f0171bafda89e3b88310ec473e9a56eae0

    • SHA512

      3ade22ddd54506b510ec04300bc9fb4a8618a224806b3779e3e007fbfe33b5ce12ff741029d7ad17b0574ef980a39e519d48da964122bfffab1939dfe77b34f7

    • SSDEEP

      98304:E5zZ80gsEX+Ljsp0d8DgI4vacQx+wOWj9ViPm:Ef80gsl3s1gFvQ+oRcm

    Score
    8/10
    evasiondiscoveryupx

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks