General
-
Target
178dbe7ff0034dc65f38d29050fe45cb46531d7b8f31cd58f8a50d62cd9c2c3f
-
Size
188KB
-
Sample
220212-d1pdnshacm
-
MD5
a88f7e07aeaae86eb7c2139d029d031a
-
SHA1
be602420f2e1bb227e4d94b5afa8f7412fb92333
-
SHA256
178dbe7ff0034dc65f38d29050fe45cb46531d7b8f31cd58f8a50d62cd9c2c3f
-
SHA512
f680f90f640c016c3e4bcf12916bd45efe00daed54ad82c5ed1cff1f72a887dc9812251ec72ecc6bf3512c296109d07adacca10b3a1cf1b21ca66883267fb3b0
Static task
static1
Behavioral task
behavioral1
Sample
178dbe7ff0034dc65f38d29050fe45cb46531d7b8f31cd58f8a50d62cd9c2c3f.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
178dbe7ff0034dc65f38d29050fe45cb46531d7b8f31cd58f8a50d62cd9c2c3f.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
178dbe7ff0034dc65f38d29050fe45cb46531d7b8f31cd58f8a50d62cd9c2c3f
-
Size
188KB
-
MD5
a88f7e07aeaae86eb7c2139d029d031a
-
SHA1
be602420f2e1bb227e4d94b5afa8f7412fb92333
-
SHA256
178dbe7ff0034dc65f38d29050fe45cb46531d7b8f31cd58f8a50d62cd9c2c3f
-
SHA512
f680f90f640c016c3e4bcf12916bd45efe00daed54ad82c5ed1cff1f72a887dc9812251ec72ecc6bf3512c296109d07adacca10b3a1cf1b21ca66883267fb3b0
Score10/10-
Sakula Payload
-
suricata: ET MALWARE Sakula/Mivast RAT CnC Beacon 1
suricata: ET MALWARE Sakula/Mivast RAT CnC Beacon 1
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-