Overview

overview

6

Static

static

3

SOA.exe

windows7-x64

6

SOA.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    SOA.exe

  • Size

    1018KB

  • Sample

    230817-ktv17sge43

  • MD5

    94d65b78733d21decb71948dad2c978a

  • SHA1

    0975c4431f502bd9acb68298efd71e653a5873e0

  • SHA256

    d80ec966ed90b051911c5f686a1d114cd2c6b3802c27514df86bbf931c7636a6

  • SHA512

    304d285f64dbbbbe35629d46b877a6605c8d30a3da66be3d5d3e573ea0db54506256bdd829f888fdc65e1a8e237cae063ae66728e4b531f717e18aa38e33b52c

  • SSDEEP

    12288:dH41ItaBXHFxmSWrb8OPSJnSg4jFyyf+bmqO/d40oV8GsRR:U6b8OKJd4jFN+bu/ds8

Score
6/10

Malware Config

Targets

    • Target

      SOA.exe

    • Size

      1018KB

    • MD5

      94d65b78733d21decb71948dad2c978a

    • SHA1

      0975c4431f502bd9acb68298efd71e653a5873e0

    • SHA256

      d80ec966ed90b051911c5f686a1d114cd2c6b3802c27514df86bbf931c7636a6

    • SHA512

      304d285f64dbbbbe35629d46b877a6605c8d30a3da66be3d5d3e573ea0db54506256bdd829f888fdc65e1a8e237cae063ae66728e4b531f717e18aa38e33b52c

    • SSDEEP

      12288:dH41ItaBXHFxmSWrb8OPSJnSg4jFyyf+bmqO/d40oV8GsRR:U6b8OKJd4jFN+bu/ds8

    Score
    6/10

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks