General
-
Target
140519d3493decc81e335ccc7c5f867fcb0f12c62ff5bc55a22158f432a49587
-
Size
92KB
-
Sample
220212-fkhbjagbh4
-
MD5
d436ac297fe15c650d0aa50d0d60b1c0
-
SHA1
c2fb353bc2ee73a133f3f95426c6a3b25d85f2f0
-
SHA256
140519d3493decc81e335ccc7c5f867fcb0f12c62ff5bc55a22158f432a49587
-
SHA512
323e2636a341458456ee3f576af27ee8000a893434d6d6298889daca2388a10f7c4d8c4412508622e3d6e942de411d9bbbcd0582948a7d451371a567f619c179
Static task
static1
Behavioral task
behavioral1
Sample
140519d3493decc81e335ccc7c5f867fcb0f12c62ff5bc55a22158f432a49587.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
140519d3493decc81e335ccc7c5f867fcb0f12c62ff5bc55a22158f432a49587.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
140519d3493decc81e335ccc7c5f867fcb0f12c62ff5bc55a22158f432a49587
-
Size
92KB
-
MD5
d436ac297fe15c650d0aa50d0d60b1c0
-
SHA1
c2fb353bc2ee73a133f3f95426c6a3b25d85f2f0
-
SHA256
140519d3493decc81e335ccc7c5f867fcb0f12c62ff5bc55a22158f432a49587
-
SHA512
323e2636a341458456ee3f576af27ee8000a893434d6d6298889daca2388a10f7c4d8c4412508622e3d6e942de411d9bbbcd0582948a7d451371a567f619c179
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-