Overview

overview

7

Static

static

SOA.exe

windows7-x64

3

SOA.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SOA.rar

  • Size

    466KB

  • Sample

    230125-mjjarshd4t

  • MD5

    6b22914d287bd2f6cd9d1af41fc862b4

  • SHA1

    1599c9758807fab8a9986a59a0ee6c63d5d84b2e

  • SHA256

    3e49c6a60657614c03773864239ed8ef9e8bfd9aea613bbed647265e82007aec

  • SHA512

    54fc51e9928fb2121e65364b29481fd3f47e0479e1cd514f41a4953af693f7b547d358b946762954b1ebe10d8e9ea920b9925953dc34f017836a6b5413b91681

  • SSDEEP

    12288:xlraKwQBeGHwp2YvCx9Fp9iPg/uwd5jiW6YphZnNHU:fm+HMmx9FyJMi8hZn9U

Score
7/10

Malware Config

Targets

    • Target

      SOA.exe

    • Size

      671KB

    • MD5

      774dc51d4da8bbc4e682008bf4d61aa2

    • SHA1

      0a12ab2bed3ce4e701e534df5c24bfef8dcc653b

    • SHA256

      b03d831a555a8366ac262fa9d13fde89b675803d41c57d36f07090a0cedab154

    • SHA512

      38bfce718ca25bba53e5ceb3de3c6b7c643bfdd358094ab8d0ec288415391146e029d778a43afe3edb86e4bf8d7fde2a65e3f553ee2467437f6b3de1eb3b2306

    • SSDEEP

      12288:UF3gflcMVpRY6HxOVU9z+EHE1tKuSoNvXOTwYM0:z6MVpcUptU9A

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks