Overview

overview

7

Static

static

3

tuc3.exe

windows7-x64

7

tuc3.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    tuc3.exe

  • Size

    7.6MB

  • Sample

    231211-treqwabgem

  • MD5

    752b70ebe3d433f4ea95d72b848afc78

  • SHA1

    b664228ec03bac2d282b9678502fcc4d22300a45

  • SHA256

    9680a3ec07e9e263d1f6b566a8af3b37c95bc92ac21dd9609f8d84f48d469c6d

  • SHA512

    0a0eea6bb6e5657d38bbb0bdc2de1e3e2e4c91706f96e51d51a2d8be459f10673fd0e6e963ebe94d81cc3d621b521885af8a06d4b03995d49e47be24d8f1b729

  • SSDEEP

    196608:dnnY8NWvGpWTTlm0OxwW+nFnfZsMUdFt30Dzj:dnnY8NELTIrxwlxQWDzj

Score
7/10
discovery

Malware Config

Targets

    • Target

      tuc3.exe

    • Size

      7.6MB

    • MD5

      752b70ebe3d433f4ea95d72b848afc78

    • SHA1

      b664228ec03bac2d282b9678502fcc4d22300a45

    • SHA256

      9680a3ec07e9e263d1f6b566a8af3b37c95bc92ac21dd9609f8d84f48d469c6d

    • SHA512

      0a0eea6bb6e5657d38bbb0bdc2de1e3e2e4c91706f96e51d51a2d8be459f10673fd0e6e963ebe94d81cc3d621b521885af8a06d4b03995d49e47be24d8f1b729

    • SSDEEP

      196608:dnnY8NWvGpWTTlm0OxwW+nFnfZsMUdFt30Dzj:dnnY8NELTIrxwlxQWDzj

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks