General

  • Target
    Oaken.zip
  • Size 91.3MB
  • Sample260810-x9cwsaab56
  • SHA256 cebdaef5b4cdc19019026b2cdafebb652124c388f92d3e43477a9a08b6ba13c6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Bin\Loader.exe
    • Size 298KB
    • SHA256 2b61296fafa08458e1e3e3d131b20634fcebbac1be8b71374cb3c03303612638
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Bin\oaken.dll
    • Size 7.8MB
    • SHA256 074dd48a356a8f78475cf594a3ff3ea211e42441c19f8a0286d20d7275ac3c4b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      OakenUpdater.exe
    • Size 33.5MB
    • SHA256 575a1d2ec2200e6f64ca04d9140b571d306ff3125fb69c31b456f0699690f5c5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      OakenV1.exe
    • Size 64.2MB
    • SHA256 0dac76c40d1bbfa604cd628e569e95ebabf02c5f2504da334b2dffdc2f6586a6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Loads dropped DLL

    • Checks whether UAC is enabled

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Network Share Discovery

      Attempt to gather information on host network.

    • Target
      oakey.dll
    • Size 697KB
    • SHA256 43fa775811e6e55d7c6fb56a27cd3a3f884e5230d6fa9ccab2a4971e19a914e9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks