Overview

overview

7

Static

static

SOA.exe

windows7-x64

3

SOA.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SOA.exe

  • Size

    671KB

  • Sample

    230125-mgh7zsfg22

  • MD5

    774dc51d4da8bbc4e682008bf4d61aa2

  • SHA1

    0a12ab2bed3ce4e701e534df5c24bfef8dcc653b

  • SHA256

    b03d831a555a8366ac262fa9d13fde89b675803d41c57d36f07090a0cedab154

  • SHA512

    38bfce718ca25bba53e5ceb3de3c6b7c643bfdd358094ab8d0ec288415391146e029d778a43afe3edb86e4bf8d7fde2a65e3f553ee2467437f6b3de1eb3b2306

  • SSDEEP

    12288:UF3gflcMVpRY6HxOVU9z+EHE1tKuSoNvXOTwYM0:z6MVpcUptU9A

Score
7/10

Malware Config

Targets

    • Target

      SOA.exe

    • Size

      671KB

    • MD5

      774dc51d4da8bbc4e682008bf4d61aa2

    • SHA1

      0a12ab2bed3ce4e701e534df5c24bfef8dcc653b

    • SHA256

      b03d831a555a8366ac262fa9d13fde89b675803d41c57d36f07090a0cedab154

    • SHA512

      38bfce718ca25bba53e5ceb3de3c6b7c643bfdd358094ab8d0ec288415391146e029d778a43afe3edb86e4bf8d7fde2a65e3f553ee2467437f6b3de1eb3b2306

    • SSDEEP

      12288:UF3gflcMVpRY6HxOVU9z+EHE1tKuSoNvXOTwYM0:z6MVpcUptU9A

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks