Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    tuc5.exe

  • Size

    6.9MB

  • Sample

    231210-zgz7qaddc3

  • MD5

    b4336ca6bab18f9d3521804993eeefd9

  • SHA1

    1f35615eef691d59ccdbde87bd02f7a6d5fc40c5

  • SHA256

    477959c8aecaf3cd9d0e105024d647b936d9595bf726a33d82f5df7990e36921

  • SHA512

    f3d8f4cf595273203a7d15f55d491af64d520bfefb020254b318eed657d9790c5308a32fb4624d23c2469da35358f9770d5a9f1c1f716fee8c2038fc3bec0222

  • SSDEEP

    196608:IxnTNzjsOzc7TGHscDgcXbIdslX38dgFYJzj:gNztzQlcDPXus98d9Jzj

Score
7/10

Malware Config

Targets

    • Target

      tuc5.exe

    • Size

      6.9MB

    • MD5

      b4336ca6bab18f9d3521804993eeefd9

    • SHA1

      1f35615eef691d59ccdbde87bd02f7a6d5fc40c5

    • SHA256

      477959c8aecaf3cd9d0e105024d647b936d9595bf726a33d82f5df7990e36921

    • SHA512

      f3d8f4cf595273203a7d15f55d491af64d520bfefb020254b318eed657d9790c5308a32fb4624d23c2469da35358f9770d5a9f1c1f716fee8c2038fc3bec0222

    • SSDEEP

      196608:IxnTNzjsOzc7TGHscDgcXbIdslX38dgFYJzj:gNztzQlcDPXus98d9Jzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks