General
-
Target
112861d327336ff1d325accc7a5d63dd09a3489e42e4c4c5b6083069c3add7d5
-
Size
99KB
-
Sample
220212-gpz8ksadbm
-
MD5
2b5cbcfd4b6c141389143decc43a07fa
-
SHA1
faff0e7142c1ec453bbbda142e9fcc36ad7035c5
-
SHA256
112861d327336ff1d325accc7a5d63dd09a3489e42e4c4c5b6083069c3add7d5
-
SHA512
01ec9e3b66cb36d24cf0012cf6d29ec4fd53c3727a09d6bff91eac9534e2007ae074e5165ad4ca66dac3eefaab2368b72b713db92f2acc0578baae486ac035eb
Static task
static1
Behavioral task
behavioral1
Sample
112861d327336ff1d325accc7a5d63dd09a3489e42e4c4c5b6083069c3add7d5.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
112861d327336ff1d325accc7a5d63dd09a3489e42e4c4c5b6083069c3add7d5.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
112861d327336ff1d325accc7a5d63dd09a3489e42e4c4c5b6083069c3add7d5
-
Size
99KB
-
MD5
2b5cbcfd4b6c141389143decc43a07fa
-
SHA1
faff0e7142c1ec453bbbda142e9fcc36ad7035c5
-
SHA256
112861d327336ff1d325accc7a5d63dd09a3489e42e4c4c5b6083069c3add7d5
-
SHA512
01ec9e3b66cb36d24cf0012cf6d29ec4fd53c3727a09d6bff91eac9534e2007ae074e5165ad4ca66dac3eefaab2368b72b713db92f2acc0578baae486ac035eb
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-