Overview

overview

10

Static

static

10

f3f1bdf892...5b.exe

windows7_x64

10

f3f1bdf892...5b.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3f1bdf89265527f8c9cd9c4ac62d7c7154ce83a254014177b00446435fcca5b

  • Size

    89KB

  • Sample

    220130-v9flkagch4

  • MD5

    6a273afa0f22d83f97d9fd2dc7dce367

  • SHA1

    7b35522bd55aaeafc744a5fa6511c559d5ac80cd

  • SHA256

    f3f1bdf89265527f8c9cd9c4ac62d7c7154ce83a254014177b00446435fcca5b

  • SHA512

    0a17cc0a626975f6058f3617fa5cfba6677524329d292f60556095f02e0f7174645d28e3541194b4a7cfddb0d80d0bf914ef5b03d923107160e16d56d3d23684

Score
10/10
sakulapersistencerattrojan

Malware Config

Targets

    • Target

      f3f1bdf89265527f8c9cd9c4ac62d7c7154ce83a254014177b00446435fcca5b

    • Size

      89KB

    • MD5

      6a273afa0f22d83f97d9fd2dc7dce367

    • SHA1

      7b35522bd55aaeafc744a5fa6511c559d5ac80cd

    • SHA256

      f3f1bdf89265527f8c9cd9c4ac62d7c7154ce83a254014177b00446435fcca5b

    • SHA512

      0a17cc0a626975f6058f3617fa5cfba6677524329d292f60556095f02e0f7174645d28e3541194b4a7cfddb0d80d0bf914ef5b03d923107160e16d56d3d23684

    Score
    10/10
    sakulapersistencerattrojan

    • Sakula

      Sakula is a remote access trojan with various capabilities.

      trojanratsakula

    • Sakula Payload

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks