General
-
Target
182a4d0183fb21b1599d8f3fa3a6a21f770f7dfd6d221995ce9276851b75deea
-
Size
216KB
-
Sample
220212-dsqxjafda9
-
MD5
5fc7515350cae47966fe2cb349088aca
-
SHA1
d9758233c63911410a5ac002ad3eb64982844529
-
SHA256
182a4d0183fb21b1599d8f3fa3a6a21f770f7dfd6d221995ce9276851b75deea
-
SHA512
0e61d23defe38067ef087cb87dae66599a5c1421e0658ebb82e4ec700eb5520a995dcd16c9bb2977683af71ff23368ee0ac127909162345dc0c6f360d0718837
Static task
static1
Behavioral task
behavioral1
Sample
182a4d0183fb21b1599d8f3fa3a6a21f770f7dfd6d221995ce9276851b75deea.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
182a4d0183fb21b1599d8f3fa3a6a21f770f7dfd6d221995ce9276851b75deea.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
182a4d0183fb21b1599d8f3fa3a6a21f770f7dfd6d221995ce9276851b75deea
-
Size
216KB
-
MD5
5fc7515350cae47966fe2cb349088aca
-
SHA1
d9758233c63911410a5ac002ad3eb64982844529
-
SHA256
182a4d0183fb21b1599d8f3fa3a6a21f770f7dfd6d221995ce9276851b75deea
-
SHA512
0e61d23defe38067ef087cb87dae66599a5c1421e0658ebb82e4ec700eb5520a995dcd16c9bb2977683af71ff23368ee0ac127909162345dc0c6f360d0718837
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-