General
-
Target
0f25d47ec76d4a77f3021476540f22cb661903a133e1b89e66a1e32939cbcf8e
-
Size
216KB
-
Sample
220212-hg4rgahbg4
-
MD5
dcf24fd64d23e0df45cf690539043a24
-
SHA1
7e05655270678ec0eba9a13d0fc9edfb1845c04e
-
SHA256
0f25d47ec76d4a77f3021476540f22cb661903a133e1b89e66a1e32939cbcf8e
-
SHA512
d2dd9f6e1ac17b525675ec1ab6925cb61e530dc0a5e8aa43d692ffb34156ad7d493035d1a6d728cebabfe59841cfa03cde3b5d7a6d1c127706e5dc93bf18e82e
Static task
static1
Behavioral task
behavioral1
Sample
0f25d47ec76d4a77f3021476540f22cb661903a133e1b89e66a1e32939cbcf8e.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0f25d47ec76d4a77f3021476540f22cb661903a133e1b89e66a1e32939cbcf8e.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
0f25d47ec76d4a77f3021476540f22cb661903a133e1b89e66a1e32939cbcf8e
-
Size
216KB
-
MD5
dcf24fd64d23e0df45cf690539043a24
-
SHA1
7e05655270678ec0eba9a13d0fc9edfb1845c04e
-
SHA256
0f25d47ec76d4a77f3021476540f22cb661903a133e1b89e66a1e32939cbcf8e
-
SHA512
d2dd9f6e1ac17b525675ec1ab6925cb61e530dc0a5e8aa43d692ffb34156ad7d493035d1a6d728cebabfe59841cfa03cde3b5d7a6d1c127706e5dc93bf18e82e
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-