Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

tuc4.exe

windows7-x64

7

tuc4.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tuc4.exe

  • Size

    7.5MB

  • Sample

    231211-v397laegc3

  • MD5

    65aeca57fbb9eaf56d2fc692368150d4

  • SHA1

    cdfc0fc7c3ececdab73bbe5fac82c490de08a3aa

  • SHA256

    6befdabe97eb517360f3fca427b520205c24a3ecccce328db461764b82f753a0

  • SHA512

    065061170e9987df7b0e3cef13a142213b771573facbd32d7fee43c6f177d5b771e93306c1d18ad7aa7160496acc7a760e8966412ebe3563984426c1e8728b2d

  • SSDEEP

    196608:RpVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:RpVBtvpbL/+vVYBrTTefzj

Score
7/10
discovery

Malware Config

Targets

    • Target

      tuc4.exe

    • Size

      7.5MB

    • MD5

      65aeca57fbb9eaf56d2fc692368150d4

    • SHA1

      cdfc0fc7c3ececdab73bbe5fac82c490de08a3aa

    • SHA256

      6befdabe97eb517360f3fca427b520205c24a3ecccce328db461764b82f753a0

    • SHA512

      065061170e9987df7b0e3cef13a142213b771573facbd32d7fee43c6f177d5b771e93306c1d18ad7aa7160496acc7a760e8966412ebe3563984426c1e8728b2d

    • SSDEEP

      196608:RpVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:RpVBtvpbL/+vVYBrTTefzj

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks