Overview

overview

7

Static

static

3

tuc4.exe

windows7-x64

7

tuc4.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tuc4.exe

  • Size

    6.9MB

  • Sample

    231211-rv515aafe2

  • MD5

    7451fa698c3342a986f8a552d5a18c22

  • SHA1

    48913997c80fa26aef9b7cffb2eb03e613ba1d30

  • SHA256

    116d126d12179d11912a55361b044982eb40885fb7651f82fa2fabbbed91c8a7

  • SHA512

    28941e54db706c7c3928d2fc1077f6fdb13fa055e157f017b46669a07796347fef6d030c310363c0460690fbbf95eb4fae39f41a9063f2f25ddb9e1b061e5ca7

  • SSDEEP

    196608:aDoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:aDyNLCWZ2HS9iQ7INzj

Score
7/10
discovery

Malware Config

Targets

    • Target

      tuc4.exe

    • Size

      6.9MB

    • MD5

      7451fa698c3342a986f8a552d5a18c22

    • SHA1

      48913997c80fa26aef9b7cffb2eb03e613ba1d30

    • SHA256

      116d126d12179d11912a55361b044982eb40885fb7651f82fa2fabbbed91c8a7

    • SHA512

      28941e54db706c7c3928d2fc1077f6fdb13fa055e157f017b46669a07796347fef6d030c310363c0460690fbbf95eb4fae39f41a9063f2f25ddb9e1b061e5ca7

    • SSDEEP

      196608:aDoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:aDyNLCWZ2HS9iQ7INzj

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks