General
-
Target
1568c018cbe6977be046e2244910ea890de492fe5b0a1a8f6d824aa832d2c6fe
-
Size
108KB
-
Sample
220212-ez2s2sgaa4
-
MD5
306c248e5a1935def073abacadaeeb84
-
SHA1
02aecb74a950c07ed33b232fdc9ff516a65cd857
-
SHA256
1568c018cbe6977be046e2244910ea890de492fe5b0a1a8f6d824aa832d2c6fe
-
SHA512
6567a7937640caf1f08d3deed35646df922f063486d58ee9e9d62f5fb35f9245b30bccf9ca7df496e5944ace1bd35e09e5ce311f6c61c8b94550899afcba0f43
Static task
static1
Behavioral task
behavioral1
Sample
1568c018cbe6977be046e2244910ea890de492fe5b0a1a8f6d824aa832d2c6fe.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
1568c018cbe6977be046e2244910ea890de492fe5b0a1a8f6d824aa832d2c6fe.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
1568c018cbe6977be046e2244910ea890de492fe5b0a1a8f6d824aa832d2c6fe
-
Size
108KB
-
MD5
306c248e5a1935def073abacadaeeb84
-
SHA1
02aecb74a950c07ed33b232fdc9ff516a65cd857
-
SHA256
1568c018cbe6977be046e2244910ea890de492fe5b0a1a8f6d824aa832d2c6fe
-
SHA512
6567a7937640caf1f08d3deed35646df922f063486d58ee9e9d62f5fb35f9245b30bccf9ca7df496e5944ace1bd35e09e5ce311f6c61c8b94550899afcba0f43
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-