General
-
Target
1472237231d832743caad8e7071c5b77e62c9d1ee43199fb0156ef639b8d8584
-
Size
191KB
-
Sample
220212-feqqqahfgn
-
MD5
d9efde24aca1e188532e69a2b15111ca
-
SHA1
ca2b81b1ad5a51a44687f906b6e73cc41ed9fa48
-
SHA256
1472237231d832743caad8e7071c5b77e62c9d1ee43199fb0156ef639b8d8584
-
SHA512
067df66e8ff3a532403cd7d08f5c8ccd0fee6fee9663276ebe2bf507da1a7c51d0c9e9ef419ed5c8905957d7b8dda632e8ddf14c7383b1e7b65bbc0fdba53110
Static task
static1
Behavioral task
behavioral1
Sample
1472237231d832743caad8e7071c5b77e62c9d1ee43199fb0156ef639b8d8584.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
1472237231d832743caad8e7071c5b77e62c9d1ee43199fb0156ef639b8d8584.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
1472237231d832743caad8e7071c5b77e62c9d1ee43199fb0156ef639b8d8584
-
Size
191KB
-
MD5
d9efde24aca1e188532e69a2b15111ca
-
SHA1
ca2b81b1ad5a51a44687f906b6e73cc41ed9fa48
-
SHA256
1472237231d832743caad8e7071c5b77e62c9d1ee43199fb0156ef639b8d8584
-
SHA512
067df66e8ff3a532403cd7d08f5c8ccd0fee6fee9663276ebe2bf507da1a7c51d0c9e9ef419ed5c8905957d7b8dda632e8ddf14c7383b1e7b65bbc0fdba53110
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-