HIUPAN

Malware & Tools · HIUPAN

· MalwareS1230 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

HIUPAN (aka U2DiskWatch) is a is a worm that propagates through removable drives known to be leveraged by Mustang Panda and was first observed utilized in 2024. (Citation: 2025_IBM_PUBLOAD_TONESHELL_HIUPAN_CLAIMLOADER_MUSTANG PANDA)(Citation: Trend Micro MUSTANG PANDA PUBLOAD HIUPAN SEPTEMBER 2024)

Tactic Coverage

stealth (3)discovery (2)persistence (2)execution (2)lateral movement (1)initial access (1)defense impairment (1)privilege escalation (1)

Used By (1 groups)

G0129Mustang PandaTA416, RedDelta

Techniques (9)

T1057Process Discovery

discovery

T1091Replication Through Removable Media

lateral movementinitial access

T1112Modify Registry

defense impairmentpersistence

T1120Peripheral Device Discovery

discovery

T1204.002Malicious File

execution

T1547.001Registry Run Keys / Startup Folder

persistence

References

https://attack.mitre.org/software/S1230 https://www.ibm.com/think/x-force/hive0154-targeting-us-philippines-pakistan-taiwan https://www.trendmicro.com/en_us/research/24/i/earth-preta-new-malware-and-strategies.html