Overview

overview

7

Static

static

3

tuc4.exe

windows7-x64

7

tuc4.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tuc4.exe

  • Size

    7.5MB

  • Sample

    231211-yvy15sgddm

  • MD5

    78bb306334e2faa3c953dc1010aaeb31

  • SHA1

    850a76029ae6dc5b36014cddf5789ac944cbc48d

  • SHA256

    27d7c39f221922536d2c1232738bb35d4a383dedbdb667459488071cd721e81d

  • SHA512

    9ee24d45870f749dd69ec25f6e745f62f736f960fae8f4cb1da6662150b6eedea6ab711c231fffcd65c8ef7d5e00844b7d0e9341ea846498a0e11fc003c0c962

  • SSDEEP

    196608:epVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:epVBtvpbL/+vVYBrTTefzj

Score
7/10
discovery

Malware Config

Targets

    • Target

      tuc4.exe

    • Size

      7.5MB

    • MD5

      78bb306334e2faa3c953dc1010aaeb31

    • SHA1

      850a76029ae6dc5b36014cddf5789ac944cbc48d

    • SHA256

      27d7c39f221922536d2c1232738bb35d4a383dedbdb667459488071cd721e81d

    • SHA512

      9ee24d45870f749dd69ec25f6e745f62f736f960fae8f4cb1da6662150b6eedea6ab711c231fffcd65c8ef7d5e00844b7d0e9341ea846498a0e11fc003c0c962

    • SSDEEP

      196608:epVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:epVBtvpbL/+vVYBrTTefzj

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks