MITRE ATT&CKsoftware (malware)
S1230 HIUPAN
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.0
- Created
- 2025-08-06
Description
HIUPAN (aka U2DiskWatch) is a is a worm that propagates through removable drives known to be leveraged by Mustang Panda and was first observed utilized in 2024.
Related
Uses · MITRE ATT&CK (9)
- T1678 Delay Execution technique
- T1574.001 DLL sub-technique
- T1204.002 Malicious File sub-technique
- T1564.001 Hidden Files and Directories sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- T1057 Process Discovery technique
- T1091 Replication Through Removable Media technique
- T1112 Modify Registry technique
- T1120 Peripheral Device Discovery technique
Referenced by MITRE ATT&CK · uses (1)
- G0129 Mustang Panda group
References
- https://www.ibm.com/think/x-force/hive0154-targeting-us-philippines-pakistan-taiwan 2025_IBM_PUBLOAD_TONESHELL_HIUPAN_CLAIMLOADER_MUSTANG PANDA
- https://www.trendmicro.com/en_us/research/24/i/earth-preta-new-malware-and-strategies.html Trend Micro MUSTANG PANDA PUBLOAD HIUPAN SEPTEMBER 2024