General
-
Target
10b586297c1099ffe5cbc482c96deb35f4e5e385ee7d2c295f03783055364cee
-
Size
99KB
-
Sample
220212-gwrvsaadhm
-
MD5
81dc2f4681a82d261aacbdc48e0291cb
-
SHA1
76aed370fabce2958f83432c15edadab185acf88
-
SHA256
10b586297c1099ffe5cbc482c96deb35f4e5e385ee7d2c295f03783055364cee
-
SHA512
8787d40d3adb30ee3db531982b2ad00337cda6437686f8a2ac68a73b77fbf0b3007b911f37015d34dac8a09f4fdee498a203ef4dd2907e71c6d852a242fe4916
Static task
static1
Behavioral task
behavioral1
Sample
10b586297c1099ffe5cbc482c96deb35f4e5e385ee7d2c295f03783055364cee.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
10b586297c1099ffe5cbc482c96deb35f4e5e385ee7d2c295f03783055364cee.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
10b586297c1099ffe5cbc482c96deb35f4e5e385ee7d2c295f03783055364cee
-
Size
99KB
-
MD5
81dc2f4681a82d261aacbdc48e0291cb
-
SHA1
76aed370fabce2958f83432c15edadab185acf88
-
SHA256
10b586297c1099ffe5cbc482c96deb35f4e5e385ee7d2c295f03783055364cee
-
SHA512
8787d40d3adb30ee3db531982b2ad00337cda6437686f8a2ac68a73b77fbf0b3007b911f37015d34dac8a09f4fdee498a203ef4dd2907e71c6d852a242fe4916
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-