General
-
Target
tuc4.exe
-
Size
7.5MB
-
Sample
231211-y9531aabd8
-
MD5
3b2559e6a84dfb8129f2640326eab336
-
SHA1
aab9a7ca2a06fdfbbc446eab62b21154854e5c44
-
SHA256
c44bf3ebcaa921e884fd83a6fb9f879b2f61e0e886754ecdc7669759875d1ca8
-
SHA512
0487345798b0daa6808d0de520902dd3d8bd57d86ef0007fafac658f308fd21033564dbb6dad7dfd7cd5bfd39af1fc2cc6d04cd5042a71a245eec09523278db4
-
SSDEEP
196608:MpVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:MpVBtvpbL/+vVYBrTTefzj
Static task
static1
Behavioral task
behavioral1
Sample
tuc4.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
tuc4.exe
Resource
win10v2004-20231130-en
Malware Config
Targets
-
-
Target
tuc4.exe
-
Size
7.5MB
-
MD5
3b2559e6a84dfb8129f2640326eab336
-
SHA1
aab9a7ca2a06fdfbbc446eab62b21154854e5c44
-
SHA256
c44bf3ebcaa921e884fd83a6fb9f879b2f61e0e886754ecdc7669759875d1ca8
-
SHA512
0487345798b0daa6808d0de520902dd3d8bd57d86ef0007fafac658f308fd21033564dbb6dad7dfd7cd5bfd39af1fc2cc6d04cd5042a71a245eec09523278db4
-
SSDEEP
196608:MpVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:MpVBtvpbL/+vVYBrTTefzj
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-