General
-
Target
1539130fe2b47bb32a249080486660410041ca5bdeedec9fb4eb7f8bbcd352d3
-
Size
101KB
-
Sample
220212-e6cgqshefn
-
MD5
f144973672b7ab5a353891f831f4fc90
-
SHA1
d7a211c65e8ab611cadbc5a1330188b29791959f
-
SHA256
1539130fe2b47bb32a249080486660410041ca5bdeedec9fb4eb7f8bbcd352d3
-
SHA512
1b8de4a4725619530af7c0ab04963b7fb4a205fbb20d827ee5bcb7296f0ae8e8d9c98035cacfacf66369b7e40041e053a417ccba72c3b0beae5c9e133380c552
Static task
static1
Behavioral task
behavioral1
Sample
1539130fe2b47bb32a249080486660410041ca5bdeedec9fb4eb7f8bbcd352d3.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
1539130fe2b47bb32a249080486660410041ca5bdeedec9fb4eb7f8bbcd352d3.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
1539130fe2b47bb32a249080486660410041ca5bdeedec9fb4eb7f8bbcd352d3
-
Size
101KB
-
MD5
f144973672b7ab5a353891f831f4fc90
-
SHA1
d7a211c65e8ab611cadbc5a1330188b29791959f
-
SHA256
1539130fe2b47bb32a249080486660410041ca5bdeedec9fb4eb7f8bbcd352d3
-
SHA512
1b8de4a4725619530af7c0ab04963b7fb4a205fbb20d827ee5bcb7296f0ae8e8d9c98035cacfacf66369b7e40041e053a417ccba72c3b0beae5c9e133380c552
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-