General
- Target tuc6.exe
- Size 7.5MB
- Sample231211-tr19wabhap
- SHA256 fc3da9afd0ae15e47c19f176807017bc16b05beda7c96fab5366455f658f7b1c
- MD5 9f5b485a78fe2c14a4ebaa713a0b995c
- SHA1 3731bd21b68263e4b41672a707c03a4609299cc7
- SHA512 3626be01d01f728146a43c99c2650299285002509d2ff21afc029cbc111afeb5a0e4fd91794f1ad211ff997381956aa25dfec4b03b81d575ca02274e1756b71a
- SSDEEP 196608:vq/iLRC0OLkYNew6tjCtD2RQVsBp4UAzj:vHC9Lkuew6t2oCO9Azj
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tuc6.exe
Resource
win7-20231023-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
tuc6.exe
Resource
win10v2004-20231127-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target tuc6.exe
- Size 7.5MB
- SHA256 fc3da9afd0ae15e47c19f176807017bc16b05beda7c96fab5366455f658f7b1c
- MD5 9f5b485a78fe2c14a4ebaa713a0b995c
- SHA1 3731bd21b68263e4b41672a707c03a4609299cc7
- SHA512 3626be01d01f728146a43c99c2650299285002509d2ff21afc029cbc111afeb5a0e4fd91794f1ad211ff997381956aa25dfec4b03b81d575ca02274e1756b71a
- SSDEEP 196608:vq/iLRC0OLkYNew6tjCtD2RQVsBp4UAzj:vHC9Lkuew6t2oCO9Azj
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.