Overview

overview

7

Static

static

7

Uninstalr_...le.exe

windows7-x64

7

Uninstalr_...le.exe

windows10-2004-x64

7

Uninstalr_...le.exe

windows11-21h2-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Uninstalr_Portable.exe

  • Size

    5.5MB

  • Sample

    240228-lm5shagd8t

  • MD5

    55cb26504cec040de4d4a6bd430ce2de

  • SHA1

    2948e58ca9f3d31c076b2cc5c16d8dba71fd7bf4

  • SHA256

    abef6f1ed0b96268121c878a4d49705f80b59c2647f7149957240de13156bfc7

  • SHA512

    e57b865cf987b493cd3e8c1bd1a0b5e2ddcde18ca06fc625eedd98a592056a05fd5224876bb23704eff15bb4ff5af229b4bab15d46b63cdec9f4e6e09c725f54

  • SSDEEP

    98304:q2XAsLlOuP1JQSBeESX+Ho8FrT/28ylm0AmshxOwxSDCGOp7rgHXo3K:ZXLku0dESdsT/iRArWwnbp7x3K

Score
7/10
discoveryspywarestealerupx

Malware Config

Targets

    • Target

      Uninstalr_Portable.exe

    • Size

      5.5MB

    • MD5

      55cb26504cec040de4d4a6bd430ce2de

    • SHA1

      2948e58ca9f3d31c076b2cc5c16d8dba71fd7bf4

    • SHA256

      abef6f1ed0b96268121c878a4d49705f80b59c2647f7149957240de13156bfc7

    • SHA512

      e57b865cf987b493cd3e8c1bd1a0b5e2ddcde18ca06fc625eedd98a592056a05fd5224876bb23704eff15bb4ff5af229b4bab15d46b63cdec9f4e6e09c725f54

    • SSDEEP

      98304:q2XAsLlOuP1JQSBeESX+Ho8FrT/28ylm0AmshxOwxSDCGOp7rgHXo3K:ZXLku0dESdsT/iRArWwnbp7x3K

    Score
    7/10
    discoveryspywarestealerupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks