General
-
Target
12d72294ce01a2dfb7e3dc1b21f9af758875e77eaa31a51eb4a8b3aa3031b99c
-
Size
92KB
-
Sample
220212-f3r9fsgdg7
-
MD5
bbf7577237548481f10b45c511b57f31
-
SHA1
bf80d817be0fa3ee8dca7d2151f832028e986710
-
SHA256
12d72294ce01a2dfb7e3dc1b21f9af758875e77eaa31a51eb4a8b3aa3031b99c
-
SHA512
588558479baae08935660bdd42a64cfeb2ac0229c78560d5b0e6fd2a7858e3cbc848bc4fe896188fb691f127037edd245c17e5bd1176edca60a6e1525afd31e0
Static task
static1
Behavioral task
behavioral1
Sample
12d72294ce01a2dfb7e3dc1b21f9af758875e77eaa31a51eb4a8b3aa3031b99c.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
12d72294ce01a2dfb7e3dc1b21f9af758875e77eaa31a51eb4a8b3aa3031b99c.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
12d72294ce01a2dfb7e3dc1b21f9af758875e77eaa31a51eb4a8b3aa3031b99c
-
Size
92KB
-
MD5
bbf7577237548481f10b45c511b57f31
-
SHA1
bf80d817be0fa3ee8dca7d2151f832028e986710
-
SHA256
12d72294ce01a2dfb7e3dc1b21f9af758875e77eaa31a51eb4a8b3aa3031b99c
-
SHA512
588558479baae08935660bdd42a64cfeb2ac0229c78560d5b0e6fd2a7858e3cbc848bc4fe896188fb691f127037edd245c17e5bd1176edca60a6e1525afd31e0
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-