HIUPAN — Malware Profile
HIUPAN (aka U2DiskWatch) is a is a worm that propagates through removable drives known to be leveraged by Mustang Panda and was first observed utilized in 2024.
MITRE ATT&CK techniques (9)
- T1057 Process Discovery
- T1091 Replication Through Removable Media
- T1112 Modify Registry
- T1120 Peripheral Device Discovery
- T1204.002 Malicious File
- T1547.001 Registry Run Keys / Startup Folder
- T1564.001 Hidden Files and Directories
- T1574.001 DLL
- T1678 Delay Execution