Overview

overview

7

Static

static

3

tuc6.exe

windows7-x64

7

tuc6.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tuc6.exe

  • Size

    6.9MB

  • Sample

    231210-v65fhsade4

  • MD5

    6ee4d480fa454b318e3dfbb13f12c154

  • SHA1

    2b1e3e3411b3f2181282b7792c6c29aa96acba07

  • SHA256

    f7b5ccdfeb94c04e6f053c525a82573bc3fb1ccb888b9251ff454bbcc42b2447

  • SHA512

    68746f8cb9eb3a3d0210ba295abc37d5cffcc89596222e615b4be8f21b55d08717133b985d0dea45c39174b48760fff223cf33eec9d4ed3c26e7f9da8d31546d

  • SSDEEP

    196608:nSnj/mmV+GsH+bNueuJRAZVAOk5Vvz+tqE9AmEkzj:nSjumV+jHUodIjk5VzfE9Awzj

Score
7/10
discovery

Malware Config

Targets

    • Target

      tuc6.exe

    • Size

      6.9MB

    • MD5

      6ee4d480fa454b318e3dfbb13f12c154

    • SHA1

      2b1e3e3411b3f2181282b7792c6c29aa96acba07

    • SHA256

      f7b5ccdfeb94c04e6f053c525a82573bc3fb1ccb888b9251ff454bbcc42b2447

    • SHA512

      68746f8cb9eb3a3d0210ba295abc37d5cffcc89596222e615b4be8f21b55d08717133b985d0dea45c39174b48760fff223cf33eec9d4ed3c26e7f9da8d31546d

    • SSDEEP

      196608:nSnj/mmV+GsH+bNueuJRAZVAOk5Vvz+tqE9AmEkzj:nSjumV+jHUodIjk5VzfE9Awzj

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks