Overview

overview

7

Static

static

3

tuc5.exe

windows7-x64

7

tuc5.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    tuc5.exe

  • Size

    7.5MB

  • Sample

    231211-zz17qsagd7

  • MD5

    fb73f3426b958cfc9341d7a511840d92

  • SHA1

    310dfd7a73203812dc459e60d72a742af4f6138b

  • SHA256

    ecfba155b0382ba1dc7520b0eb4b64e8edd0a25b4b07e26b5cab6cb6bb62f454

  • SHA512

    cd918984c5d707ae543fa023a1a140c6919f308fdec731ab7870fe7c09f89617e0f1faff62fcde138bb3c2e48b9865ed8579e7cf19ff10748ea889744557af91

  • SSDEEP

    196608:nO78pimeIjZMmsj7bXzjl3iT1A9SG7ul2xdVNWiYmJE6RI6zj:O78pimNjMDzjl3dQAdVN1YyRPzj

Score
7/10
discovery

Malware Config

Targets

    • Target

      tuc5.exe

    • Size

      7.5MB

    • MD5

      fb73f3426b958cfc9341d7a511840d92

    • SHA1

      310dfd7a73203812dc459e60d72a742af4f6138b

    • SHA256

      ecfba155b0382ba1dc7520b0eb4b64e8edd0a25b4b07e26b5cab6cb6bb62f454

    • SHA512

      cd918984c5d707ae543fa023a1a140c6919f308fdec731ab7870fe7c09f89617e0f1faff62fcde138bb3c2e48b9865ed8579e7cf19ff10748ea889744557af91

    • SSDEEP

      196608:nO78pimeIjZMmsj7bXzjl3iT1A9SG7ul2xdVNWiYmJE6RI6zj:O78pimNjMDzjl3dQAdVN1YyRPzj

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks