Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    UVUpdater.exe

  • Size

    3.3MB

  • Sample

    230615-s9b72aad54

  • MD5

    d0094b85c08fee6fad3693109f46dd8c

  • SHA1

    393be0449e470c2b98b283d12857d3c94db7aacf

  • SHA256

    d4b85a49efc8d652455824501ba6d385ef7dfe46c280c8f8434686bb0262df1b

  • SHA512

    b8219887a246b675ad9b79a884bef61e05b6774fe174167c127eb8195da912e73f50349b4c3ceea51c3b0427f426ce9f3ca0749906fe5e98c0e5519ea5abeeab

  • SSDEEP

    98304:tgEswDB+w4cU7vLmGe6QyuY1mTIwE5I3O8pMs:tswDBN4cULmu0qTwE5c5

Score
8/10

Malware Config

Targets

    • Target

      Device/HarddiskVolume3/Program Files (x86)/UltraViewer/Update/UVUpdater.exe

    • Size

      3.4MB

    • MD5

      b10fa685c645c451db5b6f023a4f0f27

    • SHA1

      5b2511c26e5bef4bd9cd1fe79a7497a83cfe4896

    • SHA256

      63d3ffb453d9717a35af6f9b8bcdff4190ae0711f872ab2f4b9f6b7a7fc8de49

    • SHA512

      c8e2466ecdd82e5498b96caa71c6468440c7463022ffb69624605a9c05b5ec6f43a63d5444772ba79217c2c981f6e4e5fb3889b739cb75b2e0d648def89dd3b0

    • SSDEEP

      98304:K5zZ80gsEX+LjOYZwzqxA4drSntNd6N5sCCN9ViPd:Kf80gsl3OzqfA3dHCCrcd

    Score
    8/10
    • Stops running service(s)

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks