General
-
Target
0c43894c7bb0db4465051203b8a132be1998e6959ecbc8559cc20e5b5461526e
-
Size
89KB
-
Sample
220212-jsas7shge8
-
MD5
c54de1b6137cb5ba9f5f83ea30ecbbab
-
SHA1
99caed0802488d3c309a96dc17794a9fc95346ae
-
SHA256
0c43894c7bb0db4465051203b8a132be1998e6959ecbc8559cc20e5b5461526e
-
SHA512
284fe0da09869f74e2ff7d76a5ca44c9554ab1a46b54d1580e57f7b281cd83b2e357082b5c1e3437db1b5f60bb326324088d86c7a3fe03fc8abb10ec1eb8c2d8
Static task
static1
Behavioral task
behavioral1
Sample
0c43894c7bb0db4465051203b8a132be1998e6959ecbc8559cc20e5b5461526e.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0c43894c7bb0db4465051203b8a132be1998e6959ecbc8559cc20e5b5461526e.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
0c43894c7bb0db4465051203b8a132be1998e6959ecbc8559cc20e5b5461526e
-
Size
89KB
-
MD5
c54de1b6137cb5ba9f5f83ea30ecbbab
-
SHA1
99caed0802488d3c309a96dc17794a9fc95346ae
-
SHA256
0c43894c7bb0db4465051203b8a132be1998e6959ecbc8559cc20e5b5461526e
-
SHA512
284fe0da09869f74e2ff7d76a5ca44c9554ab1a46b54d1580e57f7b281cd83b2e357082b5c1e3437db1b5f60bb326324088d86c7a3fe03fc8abb10ec1eb8c2d8
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-