General
-
Target
1937bb789bb6886fe63f2583766d8616dd0421eb0011f920ecc4a7d4a7181f24
-
Size
79KB
-
Sample
220212-dc2dbsgffp
-
MD5
6d5062d35300b19038b448d672b8f050
-
SHA1
be37625539d14ccfe3cdd56130d52d51936cd658
-
SHA256
1937bb789bb6886fe63f2583766d8616dd0421eb0011f920ecc4a7d4a7181f24
-
SHA512
f3a54ea1b622f81d6dad5c53db96643068d489e295d97fea2daa96577ed39f9ce6b6100df045f487c9e10b145f52c2b48f47365e924b48785a0daa9ccf5c7e23
Static task
static1
Behavioral task
behavioral1
Sample
1937bb789bb6886fe63f2583766d8616dd0421eb0011f920ecc4a7d4a7181f24.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
1937bb789bb6886fe63f2583766d8616dd0421eb0011f920ecc4a7d4a7181f24.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
1937bb789bb6886fe63f2583766d8616dd0421eb0011f920ecc4a7d4a7181f24
-
Size
79KB
-
MD5
6d5062d35300b19038b448d672b8f050
-
SHA1
be37625539d14ccfe3cdd56130d52d51936cd658
-
SHA256
1937bb789bb6886fe63f2583766d8616dd0421eb0011f920ecc4a7d4a7181f24
-
SHA512
f3a54ea1b622f81d6dad5c53db96643068d489e295d97fea2daa96577ed39f9ce6b6100df045f487c9e10b145f52c2b48f47365e924b48785a0daa9ccf5c7e23
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-