General
-
Target
119671d6935d96fc8344de86773a690f269c9c953f82426fca8f46c29f7b5d72
-
Size
80KB
-
Sample
220212-gh947sacel
-
MD5
ef886ad1945c88608fc76924144735af
-
SHA1
8109c28a772d0180e8f532870a088f849175f52c
-
SHA256
119671d6935d96fc8344de86773a690f269c9c953f82426fca8f46c29f7b5d72
-
SHA512
c9d01708e4586be0f01890526ee7c6cd6cbb8fbdfa5b806ff17c797468fc3682fce0dabd28a1d7aee82793ab895bd1faf76a182790433719a7cc9c02ee944508
Static task
static1
Behavioral task
behavioral1
Sample
119671d6935d96fc8344de86773a690f269c9c953f82426fca8f46c29f7b5d72.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
119671d6935d96fc8344de86773a690f269c9c953f82426fca8f46c29f7b5d72.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
119671d6935d96fc8344de86773a690f269c9c953f82426fca8f46c29f7b5d72
-
Size
80KB
-
MD5
ef886ad1945c88608fc76924144735af
-
SHA1
8109c28a772d0180e8f532870a088f849175f52c
-
SHA256
119671d6935d96fc8344de86773a690f269c9c953f82426fca8f46c29f7b5d72
-
SHA512
c9d01708e4586be0f01890526ee7c6cd6cbb8fbdfa5b806ff17c797468fc3682fce0dabd28a1d7aee82793ab895bd1faf76a182790433719a7cc9c02ee944508
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-