General

  • Target
    UbisoftConnectInstaller.exe
  • Size 248.4MB
  • Sample251224-n17kcsby3c
  • SHA256 9553eed5c7ccd78596656a5bffef6d8c2422fcc427e2a72fdf8598ec1f849101
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Detected Egregor ransomware 1 IoCs
  • Egregor family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • DLL Hijacking vulnerability 2 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Insecure Codesign Algorithm 2 IoCs

    File was Codesigned using an insecure algorithm.

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 22 IoCs

    Codesigned binary was signed by an untrusted entity.

File Explorer

  • UbisoftConnectInstaller.exe
    .exe 248.4MB
  • $PLUGINSDIR/AccessControl.dll
    .dll 8KB
  • out.upx
    .dll 14KB
  • $PLUGINSDIR/LangDLL.dll
    .dll 5KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsArray.dll
    .dll 12KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/registry.dll
    .dll 24KB
  • Microsoft.Gaming.XboxApp.Extensions.winmd
    .dll 11KB
  • UbisoftConnect.exe
    .exe 507KB
  • UbisoftExtension.exe
    .exe 10.2MB
  • UbisoftGameLauncher.exe
    .exe 2.7MB
  • UbisoftGameLauncher64.exe
    .exe 4.5MB
  • Uninstall.exe
    .exe 285KB
  • $PLUGINSDIR/LangDLL.dll
    .dll 5KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • UplayCrashReporter.exe
    .exe 6.3MB
  • UplayService.exe
    .exe 7.3MB
  • UplayWebCore.exe
    .exe 2.1MB
  • chrome_100_percent.pak
    587KB
  • chrome_200_percent.pak
    874KB
  • chrome_elf.dll
    .dll 989KB
  • data/loc/cs-CZ_loc.txt
    107KB
  • data/loc/da-DK_loc.txt
    102KB
  • data/loc/de-DE_loc.txt
    111KB
  • data/loc/en-CA_loc.txt
    100KB
  • data/loc/en-US_loc.txt
    99KB
  • data/loc/en-US_release_notes.txt
    170KB
  • data/loc/es-ES_loc.txt
    108KB
  • data/loc/es-MX_loc.txt
    107KB
  • data/loc/fi-FI_loc.txt
    103KB
  • data/loc/fr-FR_loc.txt
    112KB
  • data/loc/hu-HU_loc.txt
    110KB
  • data/loc/it-IT_loc.txt
    105KB
  • data/loc/ja-JP_loc.txt
    121KB
  • data/loc/ko-KO_loc.txt
    108KB
  • data/loc/nb-NO_loc.txt
    102KB
  • data/loc/nl-NL_loc.txt
    104KB
  • data/loc/pl-PL_loc.txt
    107KB
  • data/loc/pt-BR_loc.txt
    105KB
  • data/loc/pt-PT_loc.txt
    107KB
  • data/loc/ru-RU_loc.txt
    147KB
  • data/loc/sv-SE_loc.txt
    101KB
  • data/loc/th-TH_loc.txt
    180KB
  • data/loc/tr-TR_loc.txt
    106KB
  • data/loc/uk-UA_loc.txt
    147KB
  • data/loc/zh-CN_loc.txt
    94KB
  • data/loc/zh-TW_loc.txt
    94KB
  • data/resources/LICENSES.txt
    1.1MB
  • data/resources/default_avatar.png
    .png 1KB
  • data/resources/default_avatar_100.png
    .png 1KB
  • data/resources/default_avatar_128.png
    .png 1KB
  • data/resources/default_avatar_256.jpg
    .jpg 3KB
  • data/resources/default_avatar_256.png
    .png 2KB
  • data/resources/default_avatar_64.png
    .png 738B
  • data/resources/free_game_configs_schema.yml
    1KB
  • data/resources/grey_border.png
    .png 119B
  • data/resources/group_avatar_128.png
    .png 3KB
  • data/resources/group_avatar_256.png
    .png 8KB
  • data/resources/group_avatar_64.png
    .png 1KB
  • data/resources/incoming_invite_from_user.wav
    211KB
  • data/resources/noise.png
    .png 16KB
  • data/resources/other_user_joined.wav
    95KB
  • data/resources/other_user_leaves.wav
    170KB
  • data/resources/overlay_cursor.png
    .png 3KB
  • data/resources/preorder_config_schema_3_0.yml
    2KB
  • data/resources/product_add_on_config_schema_3_0.yml
    4KB
  • data/resources/product_config_schema_1_0.yml
    2KB
  • data/resources/product_config_schema_1_5.yml
    4KB
  • data/resources/product_config_schema_1_7.yml
    5KB
  • data/resources/product_config_schema_2_0.yml
    10KB
  • data/resources/product_config_schema_2_0_offline.yml
    3KB
  • data/resources/product_game_pre_order_config_schema_3_0.yml
    1KB
  • data/resources/product_template_config_schema_4.4.yml
    1KB
  • data/resources/promo_config_schema.yml
    958B
  • data/resources/rich_presence_schema.yml
    2KB
  • data/resources/sprite_frame.png
    .png 3KB
  • data/resources/sprite_frame_x.png
    .png 3KB
  • data/resources/sprite_nav_btn_small.png
    .png 3KB
  • data/resources/sprite_nav_tabs.png
    .png 20KB
  • data/resources/sprite_shop_buttons.png
    .png 3KB
  • data/resources/sprite_uplay_dropdown.png
    .png 7KB
  • data/resources/sprite_window_controls.png
    .png 1KB
  • data/resources/uat.png
    .png 1KB
  • data/resources/uplay_enabled_game_configuration_schema_3_0.yml
    1KB
  • data/resources/uplayplus_config_schema.yml
    795B
  • discord-rpc.x64.dll
    .dll 1022KB
  • discord-rpc.x86.dll
    .dll 771KB
  • gear_core_win32DLL.dll
    .dll 1.0MB
  • gear_detection_win32DLL.dll
    .dll 755KB
  • gpudatabase_win32.dll
    .dll 155KB
  • icudtl.dat
    10.0MB
  • libEGL.dll
    .dll 359KB
  • libGLESv2.dll
    .dll 5.3MB
  • libUbiCustomEvent.dll
    .dll 52KB
  • libcef.dll
    .dll 143.6MB
  • license/Licence_cs-CZ.txt
    58KB
  • license/Licence_da-DK.txt
    61KB
  • license/Licence_de-DE.txt
    65KB
  • license/Licence_en-CA.txt
    58KB
  • license/Licence_en-US.txt
    65KB
  • license/Licence_es-ES.txt
    72KB
  • license/Licence_es-MX.txt
    67KB
  • license/Licence_fi-FI.txt
    60KB
  • license/Licence_fr-FR.txt
    68KB
  • license/Licence_hu-HU.txt
    61KB
  • license/Licence_it-IT.txt
    67KB
  • license/Licence_ja-JP.txt
    29KB
  • license/Licence_ko-KO.txt
    65KB
  • license/Licence_nb-NO.txt
    62KB
  • license/Licence_nl-NL.txt
    69KB
  • license/Licence_pl-PL.txt
    68KB
  • license/Licence_pt-BR.txt
    63KB
  • license/Licence_pt-PT.txt
    63KB
  • license/Licence_ru-RU.txt
    69KB
  • license/Licence_sv-SE.txt
    61KB
  • license/Licence_th-TH.txt
    55KB
  • license/Licence_tr-TR.txt
    67KB
  • license/Licence_zh-CN.txt
    18KB
  • license/Licence_zh-TW.txt
    65KB
  • locales/1/af.pak
    355KB
  • locales/1/am.pak
    569KB
  • locales/1/ar.pak
    611KB
  • locales/1/bg.pak
    652KB
  • locales/1/bn.pak
    838KB
  • locales/1/ca.pak
    397KB
  • locales/1/cs.pak
    405KB
  • locales/1/da.pak
    368KB
  • locales/1/de.pak
    401KB
  • locales/1/el.pak
    712KB
  • locales/1/en-GB.pak
    324KB
  • locales/1/en-US.pak
    328KB
  • locales/1/es-419.pak
    393KB
  • locales/1/es.pak
    393KB
  • locales/1/et.pak
    356KB
  • locales/1/fa.pak
    576KB
  • locales/1/fi.pak
    363KB
  • locales/1/fil.pak
    408KB
  • locales/1/fr.pak
    427KB
  • locales/1/gu.pak
    815KB
  • locales/1/he.pak
    503KB
  • locales/1/hi.pak
    850KB
  • locales/1/hr.pak
    392KB
  • locales/1/hu.pak
    424KB
  • locales/1/id.pak
    348KB
  • locales/1/it.pak
    387KB
  • locales/1/ja.pak
    474KB
  • locales/1/kn.pak
    936KB
  • locales/1/ko.pak
    399KB
  • locales/1/lt.pak
    424KB
  • locales/1/lv.pak
    425KB
  • locales/1/ml.pak
    981KB
  • locales/1/mr.pak
    800KB
  • locales/1/ms.pak
    365KB
  • locales/1/nb.pak
    360KB
  • locales/1/nl.pak
    369KB
  • locales/1/pl.pak
    411KB
  • locales/1/pt-BR.pak
    386KB
  • locales/1/pt-PT.pak
    390KB
  • locales/1/ro.pak
    400KB
  • locales/1/ru.pak
    650KB
  • locales/1/sk.pak
    413KB
  • locales/1/sl.pak
    395KB
  • locales/1/sr.pak
    613KB
  • locales/1/sv.pak
    360KB
  • locales/1/sw.pak
    377KB
  • locales/1/ta.pak
    965KB
  • locales/1/te.pak
    896KB
  • locales/1/th.pak
    755KB
  • locales/1/tr.pak
    384KB
  • locales/1/uk.pak
    649KB
  • locales/1/ur.pak
    576KB
  • locales/1/vi.pak
    457KB
  • locales/1/zh-CN.pak
    332KB
  • locales/1/zh-TW.pak
    328KB
  • npuplaypc.dll
    .dll 173KB
  • npuplaypchub.dll
    .dll 173KB
  • overlay.dll
    .dll 6.9MB
  • overlay64.dll
    .dll 8.6MB
  • resources.pak
    7.0MB
  • shareplay/LICENSES.txt
    1.5MB
  • shareplay/Qt5Core.dll
    .dll 5.9MB
  • shareplay/Qt5Gui.dll
    .dll 6.8MB
  • shareplay/Qt5Multimedia.dll
    .dll 723KB
  • shareplay/Qt5Network.dll
    .dll 1.3MB
  • shareplay/Qt5Positioning.dll
    .dll 323KB
  • shareplay/Qt5PrintSupport.dll
    .dll 318KB
  • shareplay/Qt5Qml.dll
    .dll 3.5MB
  • shareplay/Qt5QmlModels.dll
    .dll 511KB
  • shareplay/Qt5Quick.dll
    .dll 4.0MB
  • shareplay/Qt5QuickWidgets.dll
    .dll 77KB
  • shareplay/Qt5WebChannel.dll
    .dll 130KB
  • shareplay/Qt5WebEngineCore.dll
    .dll 90.7MB
  • shareplay/Qt5WebEngineWidgets.dll
    .dll 249KB
  • shareplay/Qt5Widgets.dll
    .dll 5.3MB
  • shareplay/QtWebEngineProcess.exe
    .exe 497KB
  • shareplay/SharePlayClient.exe
    .exe 14.1MB
  • shareplay/audio/qtaudio_wasapi.dll
    .dll 95KB
  • shareplay/audio/qtaudio_windows.dll
    .dll 62KB
  • shareplay/bearer/qgenericbearer.dll
    .dll 51KB
  • shareplay/concrt140.dll
    .dll 324KB
  • shareplay/msvcp140.dll
    .dll 613KB
  • shareplay/platforms/qwindows.dll
    .dll 1.4MB
  • shareplay/resources/icudtl.dat
    9.9MB
  • shareplay/resources/qtwebengine_resources.pak
    .js 3.6MB
  • shareplay/resources/qtwebengine_resources_100p.pak
    .js 558KB
  • shareplay/resources/qtwebengine_resources_200p.pak
    .js 622KB
  • shareplay/styles/qwindowsvistastyle.dll
    .dll 137KB
  • shareplay/translations/qtwebengine_locales/en-US.pak
    195KB
  • shareplay/upc_r2_loader64.dll
    .dll 403KB
  • shareplay/vcruntime140.dll
    .dll 83KB
  • snapshot_blob.bin
    282KB
  • steam_api.dll
    .dll 234KB
  • steam_api64.dll
    .dll 259KB
  • ubiorbitapi_r2.dll
    .dll 3.1MB
  • ubiorbitapi_r264.dll
    .dll 4.0MB
  • ui.pak
    .gz 217KB
  • ui.pak
    .js 1.2MB
  • uicommon.pak
    .gz 24.4MB
  • uicommon.pak
    .js 47.2MB
  • uicr.pak
    .gz 376KB
  • uicr.pak
    .js 995KB
  • upc.exe
    .exe 17.5MB
  • uplay_aux_r1.dll
    .dll 3.0MB
  • uplay_aux_r164.dll
    .dll 4.0MB
  • uplay_r1.dll
    .dll 4.6MB
  • uplay_r164.dll
    .dll 6.0MB
  • uplay_r2.dll
    .dll 4.2MB
  • uplay_r264.dll
    .dll 5.5MB
  • v8_context_snapshot.bin
    597KB
  • version.txt
    5B
  • vk_swiftshader.dll
    .dll 3.4MB
  • vulkan-1.dll
    .dll 704KB
  • xinput1_3.dll
    .dll 79KB

UbisoftConnectInstaller.exe

  • IMPHASH 7eae418c7423834ffc3d79b4300bd6fb
  • SHA256 9553eed5c7ccd78596656a5bffef6d8c2422fcc427e2a72fdf8598ec1f849101
  • MD5 SHA1 SHA512 SSDEEP
Digest
08:42:13:f6:88:34:0d:79:2b:15:0f:71:97:9d:41:27:45:3f:f6:54:9e:90:2b:c2:ec:8d:5d:b9:fc:e2:74:17
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Ubisoft Entertainment Sweden AB,O=Ubisoft Entertainment Sweden AB,L=Malmö,ST=Skåne län,C=SE
Minor OS version
0
Major OS version
4
Entry point
13306
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths