General
-
Target
101561fcb30c07f928552d058b6714e5f3bbfe6062edd8934d66ba2ca7a82b97
-
Size
168KB
-
Sample
220212-g5785ahad3
-
MD5
c139e4e8f1c4b4a5b8c96da5a21eaae3
-
SHA1
6aa7f9d37bc25b1c28508cc54e6cce00ec74b714
-
SHA256
101561fcb30c07f928552d058b6714e5f3bbfe6062edd8934d66ba2ca7a82b97
-
SHA512
d1b50f51789acc7489bf43a72df18a05d07cb4672ea39a740f99fcb7c682046610e5ed0b2e3972886eb3ed78d9eafd44c3e772775c59d3896b6d2b95e3563063
Static task
static1
Behavioral task
behavioral1
Sample
101561fcb30c07f928552d058b6714e5f3bbfe6062edd8934d66ba2ca7a82b97.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
101561fcb30c07f928552d058b6714e5f3bbfe6062edd8934d66ba2ca7a82b97.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
101561fcb30c07f928552d058b6714e5f3bbfe6062edd8934d66ba2ca7a82b97
-
Size
168KB
-
MD5
c139e4e8f1c4b4a5b8c96da5a21eaae3
-
SHA1
6aa7f9d37bc25b1c28508cc54e6cce00ec74b714
-
SHA256
101561fcb30c07f928552d058b6714e5f3bbfe6062edd8934d66ba2ca7a82b97
-
SHA512
d1b50f51789acc7489bf43a72df18a05d07cb4672ea39a740f99fcb7c682046610e5ed0b2e3972886eb3ed78d9eafd44c3e772775c59d3896b6d2b95e3563063
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-