Overview

overview

10

Static

static

10

96daa5e74f...a1.exe

windows7_x64

10

96daa5e74f...a1.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    96daa5e74f5c9e2ce501ea14341f7da17ab6111b24187d1bc00f2565952bcfa1

  • Size

    89KB

  • Sample

    220130-wess3sgeb5

  • MD5

    67112866e800b9dce2892cf827444d60

  • SHA1

    0f8cda402017d87a94c6f87a7fa872dfc1aa1bea

  • SHA256

    96daa5e74f5c9e2ce501ea14341f7da17ab6111b24187d1bc00f2565952bcfa1

  • SHA512

    9a0f03cf324879803a9e97a5453184877927b8725b7159652537f68a91203ca2c5568660c95cc2718b4dfeab02b1c7f1fbc3658465a04862e8fdedae7cb13569

Score
10/10
sakulapersistencerattrojan

Malware Config

Targets

    • Target

      96daa5e74f5c9e2ce501ea14341f7da17ab6111b24187d1bc00f2565952bcfa1

    • Size

      89KB

    • MD5

      67112866e800b9dce2892cf827444d60

    • SHA1

      0f8cda402017d87a94c6f87a7fa872dfc1aa1bea

    • SHA256

      96daa5e74f5c9e2ce501ea14341f7da17ab6111b24187d1bc00f2565952bcfa1

    • SHA512

      9a0f03cf324879803a9e97a5453184877927b8725b7159652537f68a91203ca2c5568660c95cc2718b4dfeab02b1c7f1fbc3658465a04862e8fdedae7cb13569

    Score
    10/10
    sakulapersistencerattrojan

    • Sakula

      Sakula is a remote access trojan with various capabilities.

      trojanratsakula

    • Sakula Payload

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks