General
-
Target
1747ff2533af2cba22f75726ad839c8ce1f114e3be64d2813437b5d42386b013
-
Size
160KB
-
Sample
220212-d48aysfed3
-
MD5
9ae1392430c08bf1142d20c196bd52e4
-
SHA1
b95e50056301c7fa7eed06d56085755282bb75ef
-
SHA256
1747ff2533af2cba22f75726ad839c8ce1f114e3be64d2813437b5d42386b013
-
SHA512
f528c798316a985df15c6d637c4d8547e81d8b77f1c6f9897fe6bc08b4fe9b53d3f49d7e5cabcc2a9dc77fc8d0722701af89127ca98ea57f8694625846efd962
Static task
static1
Behavioral task
behavioral1
Sample
1747ff2533af2cba22f75726ad839c8ce1f114e3be64d2813437b5d42386b013.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
1747ff2533af2cba22f75726ad839c8ce1f114e3be64d2813437b5d42386b013.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
1747ff2533af2cba22f75726ad839c8ce1f114e3be64d2813437b5d42386b013
-
Size
160KB
-
MD5
9ae1392430c08bf1142d20c196bd52e4
-
SHA1
b95e50056301c7fa7eed06d56085755282bb75ef
-
SHA256
1747ff2533af2cba22f75726ad839c8ce1f114e3be64d2813437b5d42386b013
-
SHA512
f528c798316a985df15c6d637c4d8547e81d8b77f1c6f9897fe6bc08b4fe9b53d3f49d7e5cabcc2a9dc77fc8d0722701af89127ca98ea57f8694625846efd962
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-