Overview

overview

7

Static

static

3

tuc6.exe

windows7-x64

7

tuc6.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    tuc6.exe

  • Size

    7.5MB

  • Sample

    231211-vf9ybaeag9

  • MD5

    1db1efd4229e21a63d6bab9814ea6958

  • SHA1

    1482b1f5b72d3a956d3a5338f6b382c26f8b3f60

  • SHA256

    96ab04894ff29dd94926338a04a1370dc434825bc3e3a2ae68a965abf751b0cf

  • SHA512

    754ca747fc3f8e5842f2849d511da467e17c80b7a3b86de8b3c107b2622455b1a8c2911dc54a7ad724a4316a5921380c07764106033c33ec704ddac342f43c21

  • SSDEEP

    196608:9q/iLRC0OLkYNew6tjCtD2RQVsBp4UAzj:9HC9Lkuew6t2oCO9Azj

Score
7/10
discovery

Malware Config

Targets

    • Target

      tuc6.exe

    • Size

      7.5MB

    • MD5

      1db1efd4229e21a63d6bab9814ea6958

    • SHA1

      1482b1f5b72d3a956d3a5338f6b382c26f8b3f60

    • SHA256

      96ab04894ff29dd94926338a04a1370dc434825bc3e3a2ae68a965abf751b0cf

    • SHA512

      754ca747fc3f8e5842f2849d511da467e17c80b7a3b86de8b3c107b2622455b1a8c2911dc54a7ad724a4316a5921380c07764106033c33ec704ddac342f43c21

    • SSDEEP

      196608:9q/iLRC0OLkYNew6tjCtD2RQVsBp4UAzj:9HC9Lkuew6t2oCO9Azj

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks