Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    tuc7.exe

  • Size

    7.5MB

  • Sample

    231211-ylzajsgacm

  • MD5

    c84dde359b0a69f3ca9d995b21ffe1d4

  • SHA1

    383971a7b38dc9d926da52afab0c53a5ed308f29

  • SHA256

    336175427d72d0d3c9e6358c5cc4b1a4059bffc471687a1d4f9411b28f4b376c

  • SHA512

    9a158db4298a7c67acaca80dfabfe7e322df9464b3e446227869e37aeae1abc03ce0688280ef59ae1696874f82ff95d624395470f488101f25e2a2877dea0311

  • SSDEEP

    196608:MWc5A2XV/1qTZGgnkphp0rAwZYGespRHDfY5cdV4qCzj:wDFyOTpBsLp1c5SV4qCzj

Score
7/10

Malware Config

Targets

    • Target

      tuc7.exe

    • Size

      7.5MB

    • MD5

      c84dde359b0a69f3ca9d995b21ffe1d4

    • SHA1

      383971a7b38dc9d926da52afab0c53a5ed308f29

    • SHA256

      336175427d72d0d3c9e6358c5cc4b1a4059bffc471687a1d4f9411b28f4b376c

    • SHA512

      9a158db4298a7c67acaca80dfabfe7e322df9464b3e446227869e37aeae1abc03ce0688280ef59ae1696874f82ff95d624395470f488101f25e2a2877dea0311

    • SSDEEP

      196608:MWc5A2XV/1qTZGgnkphp0rAwZYGespRHDfY5cdV4qCzj:wDFyOTpBsLp1c5SV4qCzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks