Overview

overview

10

Static

static

10

391c407f5d...e1.exe

windows7_x64

10

391c407f5d...e1.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    391c407f5d091ee3e521ecfe9abfdc0771d01dc086090b99e9b0d2fc19f04ee1

  • Size

    79KB

  • Sample

    220130-2q7z2abfan

  • MD5

    b8346b4a5f8b4a6d79814f9824940504

  • SHA1

    f957d93e9ac2eabb3f77c38266e549db2dc34df8

  • SHA256

    391c407f5d091ee3e521ecfe9abfdc0771d01dc086090b99e9b0d2fc19f04ee1

  • SHA512

    6991780462d6ff7308bce3ae349b2d760bf02675e239d2a7fbe8c42a30ade30e61b43f7430ed2666c8072d835c9ac8fd07818b52f4fcb804b238ee87eac95ba7

Score
10/10
sakulapersistencerattrojan

Malware Config

Targets

    • Target

      391c407f5d091ee3e521ecfe9abfdc0771d01dc086090b99e9b0d2fc19f04ee1

    • Size

      79KB

    • MD5

      b8346b4a5f8b4a6d79814f9824940504

    • SHA1

      f957d93e9ac2eabb3f77c38266e549db2dc34df8

    • SHA256

      391c407f5d091ee3e521ecfe9abfdc0771d01dc086090b99e9b0d2fc19f04ee1

    • SHA512

      6991780462d6ff7308bce3ae349b2d760bf02675e239d2a7fbe8c42a30ade30e61b43f7430ed2666c8072d835c9ac8fd07818b52f4fcb804b238ee87eac95ba7

    Score
    10/10
    sakulapersistencerattrojan

    • Sakula

      Sakula is a remote access trojan with various capabilities.

      trojanratsakula

    • Sakula Payload

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks