sakula | 6b0b6bd87264f526e5e30e69ddcf644ff5bbccf927c90681c42a1f7d6a736ea3 | Triage

Submit
Reports

Overview

overview

Static

static

6b0b6bd872...a3.exe

windows7_x64

6b0b6bd872...a3.exe

windows10_x64

Sharing

General

Target

6b0b6bd87264f526e5e30e69ddcf644ff5bbccf927c90681c42a1f7d6a736ea3
Size

89KB
Sample

220121-3wjp3adfd3
MD5

ff1d5c6a476a56eb7ca4e38b57761a4e
SHA1

d28b488ba651777790f824385aaf0d9acf02c9c2
SHA256

6b0b6bd87264f526e5e30e69ddcf644ff5bbccf927c90681c42a1f7d6a736ea3
SHA512

6e63b9d03419b3a801de63ff5ccd04d5a32a5b554c988083038d292f2d7a23b692bf0bd5816a5d2507d27b59f41c538caa70ad4313292505107f6f7d7a56fcf4

Score

10^/10

sakula persistence rat trojan

Static task

static1

Behavioral task

behavioral1

Sample

6b0b6bd87264f526e5e30e69ddcf644ff5bbccf927c90681c42a1f7d6a736ea3.exe

Resource

win7-en-20211208

sakula persistence rat trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

6b0b6bd87264f526e5e30e69ddcf644ff5bbccf927c90681c42a1f7d6a736ea3.exe

Resource

win10-en-20211208

sakula persistence rat trojan

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  6b0b6bd87264f526e5e30e69ddcf644ff5bbccf927c90681c42a1f7d6a736ea3
- Size
  
  89KB
- MD5
  
  ff1d5c6a476a56eb7ca4e38b57761a4e
- SHA1
  
  d28b488ba651777790f824385aaf0d9acf02c9c2
- SHA256
  
  6b0b6bd87264f526e5e30e69ddcf644ff5bbccf927c90681c42a1f7d6a736ea3
- SHA512
  
  6e63b9d03419b3a801de63ff5ccd04d5a32a5b554c988083038d292f2d7a23b692bf0bd5816a5d2507d27b59f41c538caa70ad4313292505107f6f7d7a56fcf4
Score

10^/10

sakula persistence rat trojan
- Sakula
  Sakula is a remote access trojan with various capabilities.
  trojan rat sakula
- Sakula Payload
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

sakulapersistencerattrojan

behavioral2

sakulapersistencerattrojan

© 2018-2024

Terms | Privacy