Overview

overview

10

Static

static

10

7f83769b44...7e.exe

windows7_x64

10

7f83769b44...7e.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f83769b44c52df97a30633b8b7fca359b6fdb5c1fc8c74ae1da7d5040cb5f7e

  • Size

    92KB

  • Sample

    220130-q8hmbacfd6

  • MD5

    80eb86542ce7ad99acc53a9f85b01885

  • SHA1

    bd89cd830863d02164c0d1d42f76b7a8d4c523fd

  • SHA256

    7f83769b44c52df97a30633b8b7fca359b6fdb5c1fc8c74ae1da7d5040cb5f7e

  • SHA512

    fcb0f9a0790a705fd6f2bb7742650684634c7b4b2624d87aaf62f207d67fcd03ebea366bb3db04b89137da4936a5d6054abea56390d0f255b42ca9671ed99411

Score
10/10
sakulapersistencerattrojan

Malware Config

Targets

    • Target

      7f83769b44c52df97a30633b8b7fca359b6fdb5c1fc8c74ae1da7d5040cb5f7e

    • Size

      92KB

    • MD5

      80eb86542ce7ad99acc53a9f85b01885

    • SHA1

      bd89cd830863d02164c0d1d42f76b7a8d4c523fd

    • SHA256

      7f83769b44c52df97a30633b8b7fca359b6fdb5c1fc8c74ae1da7d5040cb5f7e

    • SHA512

      fcb0f9a0790a705fd6f2bb7742650684634c7b4b2624d87aaf62f207d67fcd03ebea366bb3db04b89137da4936a5d6054abea56390d0f255b42ca9671ed99411

    Score
    10/10
    sakulapersistencerattrojan

    • Sakula

      Sakula is a remote access trojan with various capabilities.

      trojanratsakula

    • Sakula Payload

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks