General

  • Target

    Octane.zip

  • Size

    2.8MB

  • Sample

    240930-nd6dsascln

  • MD5

    9d28e24774f5b11f31ba17937639ac3a

  • SHA1

    79a4038866460bb3122515a43de875c8c7f73cd1

  • SHA256

    f484663c742218069ea9b14c584acbd673a6c3fcd7cea66019c5816fd8589c15

  • SHA512

    23e4935eb8979dcf6b222574e89efdda6b7cfd6d10d66b27d0427b4e4f07c7d56f9e036181f553ee1b763eef96329bdb759c7019cd78f0dee641f250e5da549d

  • SSDEEP

    49152:ztwZiAmKysdPsxqYrnuqXzl+NafS/MfaAoRQmvSgog/aEK65PAXvhgDsVTDjbha:zENrUxqunuqXz8E1DoWmLoXV6hchgDKQ

Score
6/10

Malware Config

Targets

    • Target

      Octane.exe

    • Size

      1.5MB

    • MD5

      a381acf1c9b1ab0a5912285f40fca081

    • SHA1

      e7307916e979f5e8524ef28272e4ba6c673f289a

    • SHA256

      8bb4b062348ad5767bc42bc0fb0600bd9970b63638058787a969cb7b04b29370

    • SHA512

      6c43b1139d4c2b90d99ab41fa21b22b36a544dcdc77e986b87bd7228aa6c9611c4b71d2e6d5aeca3d6fbed99089596edf0d24a5a52eac713cad1fec0dd93a754

    • SSDEEP

      49152:8M1msa5cMzWut9qYR9kqXfd+/9AManCL:8emHHWg9q+9kqXf0FtWCL

    Score
    6/10
    • Network Share Discovery

      Attempt to gather information on host network.

    • Target

      Octane_Injector.exe

    • Size

      704KB

    • MD5

      5ee0fa66487080e85cde7ca26e09790d

    • SHA1

      0724e0b4e49a1598ba38da914b113fef6649daf2

    • SHA256

      7a311dd1a74b1e7fcc07d439ed0681cc4666802cd6b9d49efdae5c434b799021

    • SHA512

      27c7bbb95f3f34354536cca03550b4fabb172b718184c1e55d98d7847a96d528d362143eb6fc042df8b7e7e9aae199652fb5dd5398b879b515e366339345bb02

    • SSDEEP

      12288:qH/YJGsdbZ5CfW7wg79ro20/9toNc1jWYWhCIwLph0lhSMXlizNocCKbYVk:qf8bZHwI9ctFtoNc1jWYWhCIyh0lhSMa

    Score
    6/10
    • Legitimate hosting services abused for malware hosting/C2

    • Target

      Octane_Module.dll

    • Size

      1.8MB

    • MD5

      4af959d8a7816baeaab1e85f6841606d

    • SHA1

      622e20a67716f6a040df253fc85bf5a3c5ada1cc

    • SHA256

      bf058816277c87d66b4c9ab573120d93cf9cd91c44d563773afb1a41a9163498

    • SHA512

      7f9b4cf3fe80dc9e573c8fa409ca30455bd9fab5855d9d7bc19a48b6718b2ed1e6a9c02462bcc716bed8c61f44de14f65484138a3014ed0edcb058e7e80c1ddc

    • SSDEEP

      24576:Nfn1Nx2C+qAOq62Cet104Wt9jf7zC4wyy7mqg8B9sVYGookeP+8h0lhSMXluuPg1:Nfn1wd1athX9abg8B9sVYGoolYXGL

    Score
    1/10
    • Target

      runtimes/win-arm64/native/WebView2Loader.dll

    • Size

      136KB

    • MD5

      232e9d314b9bb9e677b1d79c7dc54e44

    • SHA1

      5ad36b7a527acd76e7f5414459ba61ea319bd120

    • SHA256

      dbd30934e8fb2706722a2b874719d62cbed47b1e473e3f684a66648e91f93def

    • SHA512

      504230199dea2c72c47374240a6ef66fc648208bb5f01520d057dbdf13fb04f3508e1edfc2f2db3d6b8f7321d0d150d9192b7a20a4465b702b10126e1a2861be

    • SSDEEP

      3072:rwe4zkOpEbtYRLMPM6OSRTA0gWEtJW9VDX4B2TX:UeEkOebMqgWEtJiVDX5b

    Score
    1/10
    • Target

      runtimes/win-x64/native/WebView2Loader.dll

    • Size

      161KB

    • MD5

      3fac859547077abafe806ff1e4709f47

    • SHA1

      0366df220c5d224ee64a42c929574407d2e6d2c9

    • SHA256

      f4d811cda483adb33220c5a856c5ec8dca3a095fde54b44f08e1279a6a5efd33

    • SHA512

      9b7b7aabf6bdc11dfd74430336e02d7d2b96b6bbf352f1e2d158a4900bead364900820af56cf9af25366ff5704e2ffcc2458d45dc3efe00ebd0843d127ab7435

    • SSDEEP

      3072:JX1/Z3TlTRTFOYfThTNTvDbS2bT4wdovPEKdIMsb1Z5AalipT3YEtJ5+PON2Yo:JDTlTRTFOYfThTNTvDhvZkPEKdI7pxEG

    Score
    1/10
    • Target

      runtimes/win-x86/native/WebView2Loader.dll

    • Size

      113KB

    • MD5

      999f67ef1a2d06beeaf85ec9b5d5d73d

    • SHA1

      644b1768f8675b29fb53a51edb5d344fdf55946c

    • SHA256

      4c24ade2c2a4cf652529fdf4259743fec824c628bdc056fc5c76c29e30e7c06c

    • SHA512

      6399fda1c54bd26ce82b7d48ac1b7c9741d5abf68a67bd62ec53ea2a1f82caac2e9bfdb1cb22f5af3c8ca6f4789a888f6519e02941f6c33f6f9d3b0e58eb56f4

    • SSDEEP

      3072:OnbFYqJx7sXRq2KVs9iiamgqeNZPTj7EtJlAlHJcgf4fm9pS:OZYqJx4gkYiavEtJe9f2mbS

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks