Overview

overview

10

Static

static

10

9c320f1de1...d5.exe

windows7_x64

10

9c320f1de1...d5.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9c320f1de18921854ad375f5b949f8e825f6d6c4b2805b8b7a09e0d7d73c5ed5

  • Size

    92KB

  • Sample

    220130-1as1haahcn

  • MD5

    28771cb939b989e2ab898408ccaf5504

  • SHA1

    266eac16a3fd721ac7b99c238437e59f0e0ccb14

  • SHA256

    9c320f1de18921854ad375f5b949f8e825f6d6c4b2805b8b7a09e0d7d73c5ed5

  • SHA512

    b4c85910daf5c6d419dd939e3a86c4451fb18993ba83accc097ab7ea95e71fb18f5a6d30ca8e446184b7ed2b187841462cf786dbf4cf660c2b8fe40d24e474df

Score
10/10
sakulapersistencerattrojan

Malware Config

Targets

    • Target

      9c320f1de18921854ad375f5b949f8e825f6d6c4b2805b8b7a09e0d7d73c5ed5

    • Size

      92KB

    • MD5

      28771cb939b989e2ab898408ccaf5504

    • SHA1

      266eac16a3fd721ac7b99c238437e59f0e0ccb14

    • SHA256

      9c320f1de18921854ad375f5b949f8e825f6d6c4b2805b8b7a09e0d7d73c5ed5

    • SHA512

      b4c85910daf5c6d419dd939e3a86c4451fb18993ba83accc097ab7ea95e71fb18f5a6d30ca8e446184b7ed2b187841462cf786dbf4cf660c2b8fe40d24e474df

    Score
    10/10
    sakulapersistencerattrojan

    • Sakula

      Sakula is a remote access trojan with various capabilities.

      trojanratsakula

    • Sakula Payload

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks