General
- Target tuc3.exe
- Size 7.6MB
- Sample231211-vdd3vscebp
- SHA256 17d9663dcac0b28d8429c07158c882d93a44597249c4e5c55f826c2b892b0531
- MD5 42dc21e901f23c4de2c4adb99eadf785
- SHA1 a05478b621a7f6fef7e40a2d397c7add5f01377d
- SHA512 3a343f2e9dced87e3f644c9841c3b009ef92a442155b08542f1192346967558ce98952d08c042fc5d81a0b61d4fdeb795fbddbe5ecfcb402d4a8758d6e176e29
- SSDEEP 196608:0nnY8NWvGpWTTlm0OxwW+nFnfZsMUdFt30Dzj:0nnY8NELTIrxwlxQWDzj
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tuc3.exe
Resource
win7-20231129-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
tuc3.exe
Resource
win10v2004-20231130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target tuc3.exe
- Size 7.6MB
- SHA256 17d9663dcac0b28d8429c07158c882d93a44597249c4e5c55f826c2b892b0531
- MD5 42dc21e901f23c4de2c4adb99eadf785
- SHA1 a05478b621a7f6fef7e40a2d397c7add5f01377d
- SHA512 3a343f2e9dced87e3f644c9841c3b009ef92a442155b08542f1192346967558ce98952d08c042fc5d81a0b61d4fdeb795fbddbe5ecfcb402d4a8758d6e176e29
- SSDEEP 196608:0nnY8NWvGpWTTlm0OxwW+nFnfZsMUdFt30Dzj:0nnY8NELTIrxwlxQWDzj
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.