General

  • Target
    Oaken.zip
  • Size 92.8MB
  • Sample260818-s1teysverb
  • SHA256 18610c44bbc07b2ab06745388926ca61d7caf5cdc5cbe63720f41d26fbecaac8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Oaken.exe
    • Size 70.5MB
    • SHA256 8cc4015a04af6f0dc60aab0450aed9d9512d2b7061ebc08fb221ea4b75e231fb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Checks whether UAC is enabled

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Network Share Discovery

      Attempt to gather information on host network.

    • Target
      OakenUpdater.exe
    • Size 33.5MB
    • SHA256 99de522e508be6d682b2215202c7707c727887ea7d2765438d5e2f6c4e11f805
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks