General

  • Target

    tuc7.exe

  • Size

    6.9MB

  • Sample

    231211-sctqtaaabn

  • MD5

    ad102fbef5653cb200ae39a3638390cf

  • SHA1

    c29d5d1fe9253759f9ae32ce2b855c8b3f12b8b2

  • SHA256

    899f3d1962b6b4f808cfd3379538498bf9cd39d21d80b5d95ba8733e8ec53a21

  • SHA512

    d948d45ef7df67ae6249c212a0641c0ba6f74e0d96b1a81fd329f7e9e505ad3c049d160f70c259b68d1ec3321890fc854ad64ab35c0845fbb915495225a70135

  • SSDEEP

    196608:4eusL5Sg97UrK5EvfjuiKsrGugWn7juD9k3Ozj:rVsg95KnxLrGufn765k+zj

Score
7/10

Malware Config

Targets

    • Target

      tuc7.exe

    • Size

      6.9MB

    • MD5

      ad102fbef5653cb200ae39a3638390cf

    • SHA1

      c29d5d1fe9253759f9ae32ce2b855c8b3f12b8b2

    • SHA256

      899f3d1962b6b4f808cfd3379538498bf9cd39d21d80b5d95ba8733e8ec53a21

    • SHA512

      d948d45ef7df67ae6249c212a0641c0ba6f74e0d96b1a81fd329f7e9e505ad3c049d160f70c259b68d1ec3321890fc854ad64ab35c0845fbb915495225a70135

    • SSDEEP

      196608:4eusL5Sg97UrK5EvfjuiKsrGugWn7juD9k3Ozj:rVsg95KnxLrGufn765k+zj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks