UhWxIznbHOIvjE2.exe

Classification: Malicious

UhWxIznbHOIvjE2.exe is a trojan (application/x-dosexec, 970.0 KB). Flagged by 36% of antivirus engines (25 detections). Linked to Lucifer malware.

Detection summary

  • 25 antivirus detections (36% detection ratio)
  • 0 IDS alerts
  • 14 processes observed
  • 1 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: LUCIFER (S0532)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Lucifer Abuse.ch 2021-08-22 12:49:47 2021-08-22 12:49:47 malicious-activity S0532 Lucifer

Sample information

Filenames
UhWxIznbHOIvjE2.exe, 06a73b55b5c3dc18a944e9b75f86fb53
File type
application/x-dosexec
Size
993280 bytes
MD5
06a73b55b5c3dc18a944e9b75f86fb53
SHA-1
7d872f5dff3dcb0af3fbc083e7ae729ee300f0c2
SHA-256
c68b5c1b0e8dff309c47ff500389da44e5450b6ee729c000de4643fce7932a2c
First indexed
2021-08-22 08:32:50
Last updated
2026-10-09 02:39:11

Antivirus detections

EngineDetection
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
FireEyeGeneric.mg.06a73b55b5c3dc18
SangforTrojan.Win32.Save.a
AlibabaTrojan:Win32/Kryptik.ali2000016
CyrenW32/MSIL_Kryptik.DLB.gen!Eldorado
SymantecTrojan.Gen.2
ESET-NOD32a variant of MSIL/GenKryptik.FJIU
APEXMalicious
Paloaltogeneric.ml
KasperskyUDS:DangerousObject.Multi.Generic
AvastWin32:MalwareX-gen [Trj]
SophosML/PE-A
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
SentinelOneStatic AI - Malicious PE
MicrosoftTrojan:Win32/Sabsik.TE.B!ml
McAfeeArtemis!06A73B55B5C3
TrendMicro-HouseCallTROJ_GEN.R002H07HL21
IkarusTrojan.MSIL.Crypt
eGambitUnsafe.AI_Score_98%
FortinetMSIL/GenKryptik.FJEE!tr
BitDefenderThetaGen:NN.ZemsilF.34088.8m0@aiabL2d
AVGWin32:MalwareX-gen [Trj]
CrowdStrikewin/malicious_confidence_90% (W)
MaxSecureTrojan.Malware.300983.susgen

Network contacts

194.61.0.8

Process list

NameCommand line
UhWxIznbHOIvjE2.exe
UhWxIznbHOIvjE2.exe
UpdateController.exe
UpdateController.exe
UpdateController.exe
schtasks.exe/create /sc MINUTE /mo 1 /tn "USOPrivate ver2.36" /tr "'%LOCALAPPDATA%\Update Controller ver1.20\UpdateController.exe"'/f
UpdateController.exe
UpdateController.exe
UpdateController.exe
UpdateController.exe
UpdateController.exe
UpdateController.exe
UpdateController.exe
UpdateController.exe/f