General
-
Target
tuc6.exe
-
Size
6.9MB
-
Sample
231211-sffclabdb6
-
MD5
7ea7c55c6e88d2c70e1471e3f3424f25
-
SHA1
4b2a9cade0cb5201d2d8e71ffd1a8f2539cff6b6
-
SHA256
d3e1a435fb5c52c30a952405ca7f859ae9b946eda89d3fd941b3349c6e1e1ad1
-
SHA512
d52a1b8e12fd89bbaf5bc7c35e270333590833f39725de64f6b888b85b4a4106a9395191a352246f79c90e0f1dc66a67540e239361246be1a1b4e5da837f0430
-
SSDEEP
196608:abw61woT7mRIc+DaTblZEZTXuNkrAk8TQNY0pzj:abw61woTCR9+OTbl0Zo/Gzj
Static task
static1
Behavioral task
behavioral1
Sample
tuc6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
tuc6.exe
Resource
win10v2004-20231130-en
Malware Config
Targets
-
-
Target
tuc6.exe
-
Size
6.9MB
-
MD5
7ea7c55c6e88d2c70e1471e3f3424f25
-
SHA1
4b2a9cade0cb5201d2d8e71ffd1a8f2539cff6b6
-
SHA256
d3e1a435fb5c52c30a952405ca7f859ae9b946eda89d3fd941b3349c6e1e1ad1
-
SHA512
d52a1b8e12fd89bbaf5bc7c35e270333590833f39725de64f6b888b85b4a4106a9395191a352246f79c90e0f1dc66a67540e239361246be1a1b4e5da837f0430
-
SSDEEP
196608:abw61woT7mRIc+DaTblZEZTXuNkrAk8TQNY0pzj:abw61woTCR9+OTbl0Zo/Gzj
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-