Overview

overview

8

Static

static

1

koalahook-main.zip

windows11-ltsc_2024-x64

1

koalahook-...ignore

windows11-ltsc_2024-x64

3

koalahook-...DME.md

windows11-ltsc_2024-x64

3

koalahook-...ook.py

windows11-ltsc_2024-x64

3

koalahook-...ts.txt

windows11-ltsc_2024-x64

1

koalahook-...un.bat

windows11-ltsc_2024-x64

1

koalahook-...NSE.md

windows11-ltsc_2024-x64

3

koalahook-...RMS.md

windows11-ltsc_2024-x64

8

koalahook-...in.png

windows11-ltsc_2024-x64

8

koalahook-...ge.png

windows11-ltsc_2024-x64

1

koalahook-...in.png

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    koalahook-main.zip
  • Size 1.9MB
  • Sample260706-ss86facz2p
  • SHA256 a80dbc0f188acba7c0d84c21c4e797f28ad41c00739fc1cca5f46a98d73dc4ba
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasionpersistenceransomwarespyware

Malware Config

Targets

    • Target
      koalahook-main.zip
    • Size 1.9MB
    • SHA256 a80dbc0f188acba7c0d84c21c4e797f28ad41c00739fc1cca5f46a98d73dc4ba
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1
    • Target
      koalahook-main/.gitignore
    • Size 23B
    • SHA256 8c5ef4bd837408e37a16cc3fad97099fba5f35c243f658cce386fa7ddac02cad
    • MD5 SHA1 SHA512
    Score
    3/10
    behavioral2
    • Target
      koalahook-main/README.md
    • Size 1KB
    • SHA256 51a592a0795e8e71551ac4fbc208952df503506f5b3818fc557560e65e948ee0
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    behavioral3
    • Target
      koalahook-main/koalahook.py
    • Size 11KB
    • SHA256 83a757a698e7e478d67365af75781af1cea336cdfbea7026fba6183b6e8906ea
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    behavioral4
    • Target
      koalahook-main/requirements.txt
    • Size 17B
    • SHA256 e47ba10424feb2df215b6af4bac90695e7f976f3b11866b7c1c9fcaba5481d49
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral5
    • Target
      koalahook-main/run.bat
    • Size 132B
    • SHA256 0b4e0a2047764e7f684296a48354c40d2efc3513fb323760a5f34a813d431628
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    defense_evasion
    behavioral6
    • Target
      koalahook-main/src/license/LICENSE.md
    • Size 34KB
    • SHA256 6f1e622c82a380075843bb084a7ec3b1f1d12a4a02526d75e78b0924a860aa75
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    behavioral7
    • Target
      koalahook-main/src/license/TERMS.md
    • Size 83B
    • SHA256 3cb4ced8fcd7f390ba8b7a1b082f97b082504a75c116d58aed6de1f8d85b22d2
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral8
    • Target
      koalahook-main/src/preview/beforelogin.png
    • Size 755KB
    • SHA256 3008d41c5bd305700e19f082d9eb1a38bf7ef4a388dd3713649d8ac97cde9ecb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral9
    • Target
      koalahook-main/src/preview/image.png
    • Size 500KB
    • SHA256 39b2d7b4559dcfe8085a4e2b9df98d3f60dfa2adf4ceee5a83360f54c8a4c47c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10
    • Target
      koalahook-main/src/preview/postlogin.png
    • Size 737KB
    • SHA256 2b32ed586882ad300018fdd03e528011e6a94fbff84ad4c0bba5f2323e6917c6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11

MITRE ATT&CK Enterprise v16

Tasks