Overview
overview
7Static
static
3Bin\Loader.exe
windows10-2004-x64
1Bin\Loader.exe
windows11-ltsc_2024-x64
1Bin\oaken.dll
windows10-2004-x64
1Bin\oaken.dll
windows11-ltsc_2024-x64
1OakenUpdater.exe
windows10-2004-x64
1OakenUpdater.exe
windows11-ltsc_2024-x64
1OakenV1.exe
windows10-2004-x64
7OakenV1.exe
windows11-ltsc_2024-x64
7oakey.dll
windows10-2004-x64
1oakey.dll
windows11-ltsc_2024-x64
1General
- Target Oaken.zip
- Size 91.3MB
- Sample260810-x9cwsaab56
- SHA256 cebdaef5b4cdc19019026b2cdafebb652124c388f92d3e43477a9a08b6ba13c6
- MD5 001d0a5dade1b35cf483e4864aaa8361
- SHA1 960adff3f3274291ae5017a73284b3985fb9f61f
- SHA512 eb7a506804c943617d9e64788ca7c25019c0a2a182586454aa552f50862f688bf061612c8ab2f51b9aa2e392a2d27a6eab9f6cf7f7e181ff0bf4bc34650fdeed
- SSDEEP 1572864:LqiGTYPXCX2tO1eC7thAKWTsq7QBAgKsZnrl0KON/jk2eMZLTohb6QW18Ar+ffl3:uidCbMCpiYuQBA5sZmKON/jkkwbZW9+t
- TLSH T1322833C6F1D125ECFE7B75E88BFF1D0B3770201C93551A4EA5498BD6D684ACB80AE281
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Bin\Loader.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Bin\Loader.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Bin\oaken.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Bin\oaken.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
OakenUpdater.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
OakenUpdater.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
OakenV1.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
OakenV1.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
oakey.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
oakey.dll
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target Bin\Loader.exe
- Size 298KB
- SHA256 2b61296fafa08458e1e3e3d131b20634fcebbac1be8b71374cb3c03303612638
- MD5 f39ad06b7b82f0470e34d3652dd38c80
- SHA1 329b712c1117727f2d8709d4b720569144784430
- SHA512 a5eb7d9c5ddd44f30c4af1f0a12076c3864f000fae5614710bb908176441a183f76f791961a9add516380beb06fdf3d2b602157c0c1c107f3b1e5ab4fb25e348
- SSDEEP 6144:TVePbDuA1Ie3dWmwc3KrLoCrtuXw8Taa3p1NjiU40i/QqkUSutYFrjW0DzQiROJJ:TVePbDuAT3dWmwc3KrLoCrtuXw8Ta99f
- TLSH T15354EA17E18AB07DD21896F8D395CE75C638B43D8328DDEB1BA18D6119329D36FB1A03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Bin\oaken.dll
- Size 7.8MB
- SHA256 074dd48a356a8f78475cf594a3ff3ea211e42441c19f8a0286d20d7275ac3c4b
- MD5 2cfbfe0a0ceae7880b66878992b0b59f
- SHA1 fc4d3015aa4470a26c29efe207ce93688e148736
- SHA512 789df3c3d520bbd648a14ef5b777be1efac734becd2fc06060ca6a33de713d2fdaf4bfd80520e0bfb1557ce7552902f558609b3cc9f8b73b3ac1e98822808824
- SSDEEP 49152:E41Do7oHGjKE5MZPd0KOyTWn7lDdjoUTuZtK61xPXb0O/4nqx/PfQMwai5FKRQMo:3oAdqK3r+51AH6K/aOrimuEmCLTqtyY
- TLSH T1C4869D56B7A400ACD47BD13CCAA78613E7B2B8552731ABCF16A456B91F23BE0173E350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target OakenUpdater.exe
- Size 33.5MB
- SHA256 575a1d2ec2200e6f64ca04d9140b571d306ff3125fb69c31b456f0699690f5c5
- MD5 abe790b2a65188296726513803f0c8d8
- SHA1 f77ac7edd1c0fb59a2816951bd8838576bc33391
- SHA512 eeea626f355a8693d003b5ce5fe27458fdd55819fab1d8874ca9991f1c80962d0b3023264e54253d053ad63cfa8a7a58c14a843783de8a30a523442ac75d19d4
- SSDEEP 786432:SIVqSpq36471sb0BkpyMNHZS100C+//DzGheULQA:SsTpq36a60BkEMNHq//DzbUkA
- TLSH T189771256E2F900E8E57AC0B8C6575617E7B2345917309BEF52A48A692F33FE06E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target OakenV1.exe
- Size 64.2MB
- SHA256 0dac76c40d1bbfa604cd628e569e95ebabf02c5f2504da334b2dffdc2f6586a6
- MD5 e4356eaabb672babe34bb8a29d0eac04
- SHA1 39e56b4be9e4d2844832594a43addb623ab6cdf5
- SHA512 2051d2282eeccc759f7ff019ebe7c5bbd3e9c1956326c832d8d1b566aec4a0942ef52ba067ce3591c31c07d8a9bc219ff05eda4039327d898ae2620e3e49e23b
- SSDEEP 1572864:1UZpq3Ya60BkEMNHq//DzbUkOHqfoidi/XMBG7deHdBF:yZva60BkqjzbRO+MvMYxeHdD
- TLSH T126E72356E2F900E8E57AD0B8C6571617E7B23459173097EF62A48A692F33FE06E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target oakey.dll
- Size 697KB
- SHA256 43fa775811e6e55d7c6fb56a27cd3a3f884e5230d6fa9ccab2a4971e19a914e9
- MD5 880da67d47a2be134b5d831fcf4b87bc
- SHA1 d59c7be69813977427d116643a4a6ed3ec1f54a0
- SHA512 96bd5f9507d8821715668d33ed3acbfe9ddb668b718869d0bbd80d6af04ae963849a82b0e08862f3ff5c7d39e24f61b3b5ec5daa1a56c0c29799a54276c4e09e
- SSDEEP 12288:PVy0q6tESeavUDYO+bpQ9NFQqLwvO6z0MZttB70:PVy0q6tE7avU1f/QUMD
- TLSH T159E43002AB44DB01C96C353A92FB296C63E1F9CB0371D90FCF55FA961DD22B69D8C246
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10