General
-
Target
1332e3adefd9b658005417ca675e21a1a7facca7ebf02848e2ad8c9181fc7a3b
-
Size
100KB
-
Sample
220212-fymheaaabl
-
MD5
2a36ff55f8f9ed76bca90ace9c0148e1
-
SHA1
434ed195c683a4792f2c52674b29abadacd6c32d
-
SHA256
1332e3adefd9b658005417ca675e21a1a7facca7ebf02848e2ad8c9181fc7a3b
-
SHA512
752056ac17275896f8aa1cf2ec22b0dda1b6e903e3742f1eeef2d15881088a3952225a7ed9bc60fbcb8931d3a66ab2600d9782a9064d954e19b150c677fbd8a5
Static task
static1
Behavioral task
behavioral1
Sample
1332e3adefd9b658005417ca675e21a1a7facca7ebf02848e2ad8c9181fc7a3b.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
1332e3adefd9b658005417ca675e21a1a7facca7ebf02848e2ad8c9181fc7a3b.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
1332e3adefd9b658005417ca675e21a1a7facca7ebf02848e2ad8c9181fc7a3b
-
Size
100KB
-
MD5
2a36ff55f8f9ed76bca90ace9c0148e1
-
SHA1
434ed195c683a4792f2c52674b29abadacd6c32d
-
SHA256
1332e3adefd9b658005417ca675e21a1a7facca7ebf02848e2ad8c9181fc7a3b
-
SHA512
752056ac17275896f8aa1cf2ec22b0dda1b6e903e3742f1eeef2d15881088a3952225a7ed9bc60fbcb8931d3a66ab2600d9782a9064d954e19b150c677fbd8a5
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-