Overview

overview

7

Static

static

3

tuc7.exe

windows7-x64

7

tuc7.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    tuc7.exe

  • Size

    6.9MB

  • Sample

    231211-rle4caghfn

  • MD5

    7c761b803c2dfe263becbdde156d41f3

  • SHA1

    cd046281dfba22415ccd4be3b9d33bb2f9d6c0a1

  • SHA256

    3b7b3183ea676e231140d5ced1fbc1752fe3e7b873939318401603c4478d8868

  • SHA512

    49bd6ff57aae79c0a57f259654d2a88ba571ab4379ef3b85216c9e03d58cf3d9042ccc6e725b9b9cc0e20ca9e354228b1cc35470845457e748552dad22876866

  • SSDEEP

    196608:heusL5Sg97UrK5EvfjuiKsrGugWn7juD9k3Ozj:0Vsg95KnxLrGufn765k+zj

Score
7/10
discovery

Malware Config

Targets

    • Target

      tuc7.exe

    • Size

      6.9MB

    • MD5

      7c761b803c2dfe263becbdde156d41f3

    • SHA1

      cd046281dfba22415ccd4be3b9d33bb2f9d6c0a1

    • SHA256

      3b7b3183ea676e231140d5ced1fbc1752fe3e7b873939318401603c4478d8868

    • SHA512

      49bd6ff57aae79c0a57f259654d2a88ba571ab4379ef3b85216c9e03d58cf3d9042ccc6e725b9b9cc0e20ca9e354228b1cc35470845457e748552dad22876866

    • SSDEEP

      196608:heusL5Sg97UrK5EvfjuiKsrGugWn7juD9k3Ozj:0Vsg95KnxLrGufn765k+zj

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks