Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

Device/Har...er.exe

windows7-x64

8

Device/Har...er.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    UVUpdater.exe

  • Size

    3.3MB

  • Sample

    230608-p7mdfafe33

  • MD5

    a2933fc1ce689f46360db63a93af0899

  • SHA1

    0db2f1a355537027045c8a5ae5d8b5945dd3473b

  • SHA256

    41417357bea0db8034e2ba21ee6f463d1bdd0f2c5c5b77baa55cda8a583f12ee

  • SHA512

    0dcc7423508f0ab4956b4512432e4b78b4835ab8c377dfbc80a694ac8317bd87d37e91be5eba841f2f186a7ccd8dff1108b664922e6595c7c6440458894cc34e

  • SSDEEP

    49152:a5ZAv828fQ1pM8D8fdGnqHrqRpCinGV3VQFcZQZKkLiSrZCgwMLlmmZ5:a5Sv828fE/iGqHrGpZnGVl+LtrZCSbD

Score
8/10
discoveryevasionupx

Malware Config

Targets

    • Target

      Device/HarddiskVolume5/Program Files (x86)/UltraViewer/Update/UVUpdater.exe

    • Size

      3.4MB

    • MD5

      9f6011cda9bd22412484a0fc33e7ca8a

    • SHA1

      136b33e3e335d0c2901fb7b85fe26fc5e88445d5

    • SHA256

      8f4f9a43bbfbe3b842a5cdd7cbc621f0171bafda89e3b88310ec473e9a56eae0

    • SHA512

      3ade22ddd54506b510ec04300bc9fb4a8618a224806b3779e3e007fbfe33b5ce12ff741029d7ad17b0574ef980a39e519d48da964122bfffab1939dfe77b34f7

    • SSDEEP

      98304:E5zZ80gsEX+Ljsp0d8DgI4vacQx+wOWj9ViPm:Ef80gsl3s1gFvQ+oRcm

    Score
    8/10
    evasiondiscoveryupx

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks