General
-
Target
15474cf3149c458d282e34a5a3d9bd6c089e0f96f68ba292e835d30fa154ec07
-
Size
216KB
-
Sample
220212-e2xxwagac3
-
MD5
9b7be34d0fc1a3502802a9b15076b2e8
-
SHA1
574a8dfac693a35528ef4fe649a585b34500ed97
-
SHA256
15474cf3149c458d282e34a5a3d9bd6c089e0f96f68ba292e835d30fa154ec07
-
SHA512
656373fef3efd3e7ff625503ee517c3e06595a9b2c7824c9d198805c1ce114261d7661bc5faca8b50d33559cf5f759d9dc553d254de0ca00f9dc4492fdddc12a
Static task
static1
Behavioral task
behavioral1
Sample
15474cf3149c458d282e34a5a3d9bd6c089e0f96f68ba292e835d30fa154ec07.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
15474cf3149c458d282e34a5a3d9bd6c089e0f96f68ba292e835d30fa154ec07.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
15474cf3149c458d282e34a5a3d9bd6c089e0f96f68ba292e835d30fa154ec07
-
Size
216KB
-
MD5
9b7be34d0fc1a3502802a9b15076b2e8
-
SHA1
574a8dfac693a35528ef4fe649a585b34500ed97
-
SHA256
15474cf3149c458d282e34a5a3d9bd6c089e0f96f68ba292e835d30fa154ec07
-
SHA512
656373fef3efd3e7ff625503ee517c3e06595a9b2c7824c9d198805c1ce114261d7661bc5faca8b50d33559cf5f759d9dc553d254de0ca00f9dc4492fdddc12a
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-