Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

tuc5.exe

windows7-x64

7

tuc5.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tuc5.exe

  • Size

    7.5MB

  • Sample

    231211-yldnvahcg2

  • MD5

    f10c35f91a9f8be826122e7c3c98100d

  • SHA1

    0cf0c50b367bbfc74225ad6f82153a5d15e09539

  • SHA256

    96198611ca7f4d889fa1e0a66c6b93651f0d99e5a3f3d440a0a465858f556b9d

  • SHA512

    8d3878587351f936650c38d1a2df6b629a79d723ee09b22ab64163ef28813a088e620cda531ab0c590edca0187dea81eecf9ce99b487d18da3241abb24a964f6

  • SSDEEP

    196608:QO78pimeIjZMmsj7bXzjl3iT1A9SG7ul2xdVNWiYmJE6RI6zj:V78pimNjMDzjl3dQAdVN1YyRPzj

Score
7/10
discovery

Malware Config

Targets

    • Target

      tuc5.exe

    • Size

      7.5MB

    • MD5

      f10c35f91a9f8be826122e7c3c98100d

    • SHA1

      0cf0c50b367bbfc74225ad6f82153a5d15e09539

    • SHA256

      96198611ca7f4d889fa1e0a66c6b93651f0d99e5a3f3d440a0a465858f556b9d

    • SHA512

      8d3878587351f936650c38d1a2df6b629a79d723ee09b22ab64163ef28813a088e620cda531ab0c590edca0187dea81eecf9ce99b487d18da3241abb24a964f6

    • SSDEEP

      196608:QO78pimeIjZMmsj7bXzjl3iT1A9SG7ul2xdVNWiYmJE6RI6zj:V78pimNjMDzjl3dQAdVN1YyRPzj

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks