General
-
Target
tuc3.exe
-
Size
6.9MB
-
Sample
231211-p3a5lseggl
-
MD5
bd7a3d558a9373bdda26e0bb67de04dd
-
SHA1
97959200431d5e67445baa378ce9cf0383b1cf44
-
SHA256
b86cf5d8c0243b56e0ab26702335ca05f6228219994e27c6d9a8643d82f81cff
-
SHA512
6161da47bf997b6420634da1925d9a207aca6e8692993009bc4b13bd88553a41a3206c841e470745b19f55a1438c14d1bd0c883b0eb0318d20fe89d21de9c89c
-
SSDEEP
196608:VW0fKLtr95HARqIrmVY8S50UL8Kj8yTwHvWY3Nzj:VtO/hAPmVNyEWeNzj
Static task
static1
Behavioral task
behavioral1
Sample
tuc3.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
tuc3.exe
Resource
win10v2004-20231130-en
Malware Config
Targets
-
-
Target
tuc3.exe
-
Size
6.9MB
-
MD5
bd7a3d558a9373bdda26e0bb67de04dd
-
SHA1
97959200431d5e67445baa378ce9cf0383b1cf44
-
SHA256
b86cf5d8c0243b56e0ab26702335ca05f6228219994e27c6d9a8643d82f81cff
-
SHA512
6161da47bf997b6420634da1925d9a207aca6e8692993009bc4b13bd88553a41a3206c841e470745b19f55a1438c14d1bd0c883b0eb0318d20fe89d21de9c89c
-
SSDEEP
196608:VW0fKLtr95HARqIrmVY8S50UL8Kj8yTwHvWY3Nzj:VtO/hAPmVNyEWeNzj
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-