General
-
Target
158cc6450d391bf4722443983615f53d25749454b8d30af4c27ca8be3990f424
-
Size
99KB
-
Sample
220212-ew37pshdhq
-
MD5
efed35db313e960571c2dbdb2fa06eb0
-
SHA1
ecd149873911eca5acf14b24f43d393315385f1a
-
SHA256
158cc6450d391bf4722443983615f53d25749454b8d30af4c27ca8be3990f424
-
SHA512
e96d7f8c38a3f38c70864be3180da711d3c6fa46bba804a62f1d81b5c9d8845c5dac3b9d0e3e54ed9078a2690fcd26526556b8d4d0d73857036ab36ea1497456
Static task
static1
Behavioral task
behavioral1
Sample
158cc6450d391bf4722443983615f53d25749454b8d30af4c27ca8be3990f424.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
158cc6450d391bf4722443983615f53d25749454b8d30af4c27ca8be3990f424.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
158cc6450d391bf4722443983615f53d25749454b8d30af4c27ca8be3990f424
-
Size
99KB
-
MD5
efed35db313e960571c2dbdb2fa06eb0
-
SHA1
ecd149873911eca5acf14b24f43d393315385f1a
-
SHA256
158cc6450d391bf4722443983615f53d25749454b8d30af4c27ca8be3990f424
-
SHA512
e96d7f8c38a3f38c70864be3180da711d3c6fa46bba804a62f1d81b5c9d8845c5dac3b9d0e3e54ed9078a2690fcd26526556b8d4d0d73857036ab36ea1497456
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-