Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    tuc7.exe

  • Size

    6.9MB

  • Sample

    231211-rh7zysaca3

  • MD5

    cfa8e151ffde662bf810677309b55ae9

  • SHA1

    79eee243b42540b79e6d1550b3443b168c3bd951

  • SHA256

    c2e16de97139bc0967e0f258df08311e25697ddd1a4aa4c8e50e1e95a8d04299

  • SHA512

    832eefa37ee34ba0edbfec275e942939d908a238349a2d61d3f5165ebc6af7eb0810cbaccfe33e4a30b351f7c44c7de705a88a55b01e2a2c689c0d68ad1dc93c

  • SSDEEP

    196608:weusL5Sg97UrK5EvfjuiKsrGugWn7juD9k3Ozj:DVsg95KnxLrGufn765k+zj

Score
7/10

Malware Config

Targets

    • Target

      tuc7.exe

    • Size

      6.9MB

    • MD5

      cfa8e151ffde662bf810677309b55ae9

    • SHA1

      79eee243b42540b79e6d1550b3443b168c3bd951

    • SHA256

      c2e16de97139bc0967e0f258df08311e25697ddd1a4aa4c8e50e1e95a8d04299

    • SHA512

      832eefa37ee34ba0edbfec275e942939d908a238349a2d61d3f5165ebc6af7eb0810cbaccfe33e4a30b351f7c44c7de705a88a55b01e2a2c689c0d68ad1dc93c

    • SSDEEP

      196608:weusL5Sg97UrK5EvfjuiKsrGugWn7juD9k3Ozj:DVsg95KnxLrGufn765k+zj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks