General
-
Target
11be013a99859014b8499cbbff89fc487b76f4cfeac4320ffa9787a011135563
-
Size
101KB
-
Sample
220212-gf77tsgfc5
-
MD5
2b09de2051e2bf90bc53cf6c01e0bc9e
-
SHA1
69aa8f2062d8e776dae5086aa82888d021984c9f
-
SHA256
11be013a99859014b8499cbbff89fc487b76f4cfeac4320ffa9787a011135563
-
SHA512
5cb594ddcd70e2e6f3ab82885a1b470c2037ce302442fef60c6f9664c442fa58b0c52708272f6d6f7548fd6d458e44a05753b17eb6934af6fcfceaa983c79e29
Static task
static1
Behavioral task
behavioral1
Sample
11be013a99859014b8499cbbff89fc487b76f4cfeac4320ffa9787a011135563.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
11be013a99859014b8499cbbff89fc487b76f4cfeac4320ffa9787a011135563.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
11be013a99859014b8499cbbff89fc487b76f4cfeac4320ffa9787a011135563
-
Size
101KB
-
MD5
2b09de2051e2bf90bc53cf6c01e0bc9e
-
SHA1
69aa8f2062d8e776dae5086aa82888d021984c9f
-
SHA256
11be013a99859014b8499cbbff89fc487b76f4cfeac4320ffa9787a011135563
-
SHA512
5cb594ddcd70e2e6f3ab82885a1b470c2037ce302442fef60c6f9664c442fa58b0c52708272f6d6f7548fd6d458e44a05753b17eb6934af6fcfceaa983c79e29
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-