General
-
Target
0d31d15285940dd1937d601955a3372e6df122a0732717a294f4e1e4d43dfae4
-
Size
192KB
-
Sample
220212-jensxabben
-
MD5
9977eebefa8a1daa38512fa404c73803
-
SHA1
290b95fc161f83f5ff036c5b850d09286f23bb46
-
SHA256
0d31d15285940dd1937d601955a3372e6df122a0732717a294f4e1e4d43dfae4
-
SHA512
8b7bf70676fa7fb1a263fbd4f84aca4f586764539be5362f2f8a1f6a753f86a1f0a25a602e1989d678412605ad7c2861a1522c9994ff6100ab430715aafa990e
Static task
static1
Behavioral task
behavioral1
Sample
0d31d15285940dd1937d601955a3372e6df122a0732717a294f4e1e4d43dfae4.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0d31d15285940dd1937d601955a3372e6df122a0732717a294f4e1e4d43dfae4.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
0d31d15285940dd1937d601955a3372e6df122a0732717a294f4e1e4d43dfae4
-
Size
192KB
-
MD5
9977eebefa8a1daa38512fa404c73803
-
SHA1
290b95fc161f83f5ff036c5b850d09286f23bb46
-
SHA256
0d31d15285940dd1937d601955a3372e6df122a0732717a294f4e1e4d43dfae4
-
SHA512
8b7bf70676fa7fb1a263fbd4f84aca4f586764539be5362f2f8a1f6a753f86a1f0a25a602e1989d678412605ad7c2861a1522c9994ff6100ab430715aafa990e
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-