General
-
Target
0ebbfe3c522aaf32a5d333a5f33e7aeeb7b11c57eb16a6f109f674b25ce5fa48
-
Size
99KB
-
Sample
220212-ht9s9ahce8
-
MD5
2d80678f38de0e30dd77d72bc41f80d8
-
SHA1
00e13ed03b7e876bd95ebf07b96df7492083c862
-
SHA256
0ebbfe3c522aaf32a5d333a5f33e7aeeb7b11c57eb16a6f109f674b25ce5fa48
-
SHA512
220a706bfb0d606a5ba1508e5aba646c6480e48a2ccb9aa9f669d1af919793c2510dfe8456c5f12b5afda42e471aa3bdc32b2ca8969e575b5236550cac646451
Static task
static1
Behavioral task
behavioral1
Sample
0ebbfe3c522aaf32a5d333a5f33e7aeeb7b11c57eb16a6f109f674b25ce5fa48.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0ebbfe3c522aaf32a5d333a5f33e7aeeb7b11c57eb16a6f109f674b25ce5fa48.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
0ebbfe3c522aaf32a5d333a5f33e7aeeb7b11c57eb16a6f109f674b25ce5fa48
-
Size
99KB
-
MD5
2d80678f38de0e30dd77d72bc41f80d8
-
SHA1
00e13ed03b7e876bd95ebf07b96df7492083c862
-
SHA256
0ebbfe3c522aaf32a5d333a5f33e7aeeb7b11c57eb16a6f109f674b25ce5fa48
-
SHA512
220a706bfb0d606a5ba1508e5aba646c6480e48a2ccb9aa9f669d1af919793c2510dfe8456c5f12b5afda42e471aa3bdc32b2ca8969e575b5236550cac646451
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-