General
-
Target
17d85280f1193fb6ad770653db872daf46c25b361ea1c3841d45721b04f743f9
-
Size
191KB
-
Sample
220212-dwdrdafdd3
-
MD5
0d37ce7986b62357b8cfbda9a53d614d
-
SHA1
d05fd4d44ba1318c49ba1d60ebd5e9f37fe862ca
-
SHA256
17d85280f1193fb6ad770653db872daf46c25b361ea1c3841d45721b04f743f9
-
SHA512
7cf411f5c38ebfd6226d37b3fdcef37b0f88b5da9d7f1e3b00bacc9fafbadedb47d597e8dc0d18ee66e27adcd98c63dfebde4b0250b24eb17ba68791055708ae
Static task
static1
Behavioral task
behavioral1
Sample
17d85280f1193fb6ad770653db872daf46c25b361ea1c3841d45721b04f743f9.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
17d85280f1193fb6ad770653db872daf46c25b361ea1c3841d45721b04f743f9.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
17d85280f1193fb6ad770653db872daf46c25b361ea1c3841d45721b04f743f9
-
Size
191KB
-
MD5
0d37ce7986b62357b8cfbda9a53d614d
-
SHA1
d05fd4d44ba1318c49ba1d60ebd5e9f37fe862ca
-
SHA256
17d85280f1193fb6ad770653db872daf46c25b361ea1c3841d45721b04f743f9
-
SHA512
7cf411f5c38ebfd6226d37b3fdcef37b0f88b5da9d7f1e3b00bacc9fafbadedb47d597e8dc0d18ee66e27adcd98c63dfebde4b0250b24eb17ba68791055708ae
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-