General
-
Target
1429f33587ac1a40a16c22858f2fd6f318085f9491bd14d69933660a28ca8a4b
-
Size
216KB
-
Sample
220212-fht8bahgbr
-
MD5
659b335dc6ba7b78f98b0159a4fd37b7
-
SHA1
b39a0e5a2f67cb0016854ae88d077726b894cd04
-
SHA256
1429f33587ac1a40a16c22858f2fd6f318085f9491bd14d69933660a28ca8a4b
-
SHA512
dd60eed65870ea5ab4327f8aeb94e33556b8df7466eb5cfacd7203c6c5726b91d2fb03cbaef117f3084b26742c6b263e3a805b0b621bc05ed66e806d8e9aabf8
Static task
static1
Behavioral task
behavioral1
Sample
1429f33587ac1a40a16c22858f2fd6f318085f9491bd14d69933660a28ca8a4b.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
1429f33587ac1a40a16c22858f2fd6f318085f9491bd14d69933660a28ca8a4b.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
1429f33587ac1a40a16c22858f2fd6f318085f9491bd14d69933660a28ca8a4b
-
Size
216KB
-
MD5
659b335dc6ba7b78f98b0159a4fd37b7
-
SHA1
b39a0e5a2f67cb0016854ae88d077726b894cd04
-
SHA256
1429f33587ac1a40a16c22858f2fd6f318085f9491bd14d69933660a28ca8a4b
-
SHA512
dd60eed65870ea5ab4327f8aeb94e33556b8df7466eb5cfacd7203c6c5726b91d2fb03cbaef117f3084b26742c6b263e3a805b0b621bc05ed66e806d8e9aabf8
Score10/10-
Sakula Payload
-
suricata: ET MALWARE Sakula/Mivast RAT CnC Beacon 1
suricata: ET MALWARE Sakula/Mivast RAT CnC Beacon 1
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-