General
- Target Oaken.zip
- Size 92.8MB
- Sample260818-s1teysverb
- SHA256 18610c44bbc07b2ab06745388926ca61d7caf5cdc5cbe63720f41d26fbecaac8
- MD5 3bbe02d575fc379e56fe54206800632a
- SHA1 3cfdbea5d5e256f2b57698ee64067aa1020bf953
- SHA512 e4fda36ef246aad72b2096a5b41b7800d02b17edba386429a499ddf87d65b2044842ebb325e8bdbd2ea03f1c69cc5ea259d313fc7dff570eeef68c709a497b1a
- SSDEEP 1572864:jnnp+VEcMFW8aFrokwMv3XQC60bQJB6l8QfUI3PKXimNUWW2ggQWuUVPj/Ggj:rAqc8iNHQC6/Bg8QfTSXVW2qAj/Ggj
- TLSH T1FF283386D1E3227FBF6D72B4C3DE1A473DB5700D42516786AA4687EA43C08CFC89A745
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Oaken.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Oaken.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
OakenUpdater.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
OakenUpdater.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target Oaken.exe
- Size 70.5MB
- SHA256 8cc4015a04af6f0dc60aab0450aed9d9512d2b7061ebc08fb221ea4b75e231fb
- MD5 0cf6a8a71992d443b931b4ccf19caf83
- SHA1 bb1df1ce3c951bba457c8f44149cd251773abdbc
- SHA512 fb7ea681ae2eb1195da58d41a91da170df2b970955945eff4e508e254e870eede1fd180965d37bad4c36b39ca6ddcefab86992359c88f961fc505397b7b731f5
- SSDEEP 1572864:F8/pq3Ya60BkEMNHq//DzbUkOHqfoidi/XMBG7deHdBi:a/va60BkqjzbRO+MvMYxeHdQ
- TLSH T1B6F72302E6A841D8D97AE078C6E71617E7B174CA03308BDF9B649B651F63BE09E7D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target OakenUpdater.exe
- Size 33.5MB
- SHA256 99de522e508be6d682b2215202c7707c727887ea7d2765438d5e2f6c4e11f805
- MD5 36f28598ec1382adacd1a70ace81ea3f
- SHA1 4f7170204714aeb3e648e0a907e99aea212f65cf
- SHA512 e727706630f4de1d00cc213289c816ea43c40587f3cf84dff2f8288264e1288ba5c2a63ffa436011f4648e8d88f3c6a0ecd19a1768801b0f14f5f55695931cb8
- SSDEEP 786432:CIK8Spq36471sb0BkpyMNHZS100C+//DzGheULQ5:C/Jpq36a60BkEMNHq//DzbUk5
- TLSH T19E771256E2F900E8E57AC0B8C6575617E7B2345917309BEF52A48A692F33FE06E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10