Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    tuc7.exe

  • Size

    6.9MB

  • Sample

    231210-wwggdabac5

  • MD5

    8cdc35abbc8f012285fa8ada42cd1854

  • SHA1

    27184eee999841e6c589d90fd4f2db92abb21255

  • SHA256

    fcd543fca24df3c849ddd7c28c225335d97c2c8d678409eb5865a7e04548e19d

  • SHA512

    5ec7a6672a3f633d9561d21b48e2af99a8cab035f7f42aa0afb3054967ed38fac7e9677a539e73f66eef2dcbea3a86922ae40768a120cbe59dd79a53d00f12e7

  • SSDEEP

    196608:aA89BmaeXRdyXFnlUrU7o7Bz3HzNNn1jnNnTfMImG0zj:CBmakyVnlUQ7Wz3Tv1jNTh0zj

Score
7/10

Malware Config

Targets

    • Target

      tuc7.exe

    • Size

      6.9MB

    • MD5

      8cdc35abbc8f012285fa8ada42cd1854

    • SHA1

      27184eee999841e6c589d90fd4f2db92abb21255

    • SHA256

      fcd543fca24df3c849ddd7c28c225335d97c2c8d678409eb5865a7e04548e19d

    • SHA512

      5ec7a6672a3f633d9561d21b48e2af99a8cab035f7f42aa0afb3054967ed38fac7e9677a539e73f66eef2dcbea3a86922ae40768a120cbe59dd79a53d00f12e7

    • SSDEEP

      196608:aA89BmaeXRdyXFnlUrU7o7Bz3HzNNn1jnNnTfMImG0zj:CBmakyVnlUQ7Wz3Tv1jNTh0zj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks