General
-
Target
0be2224bd1165cc9feabee8c96b718462eee9382d2f51fd9a0d695278240665f
-
Size
92KB
-
Sample
220212-jxchlahhb3
-
MD5
0307cae555d7034ea983046a18c57ff4
-
SHA1
0e8fe5b70035f5d6f77efc4e392ea1d80d12dd02
-
SHA256
0be2224bd1165cc9feabee8c96b718462eee9382d2f51fd9a0d695278240665f
-
SHA512
4796973e86c3ffd1b9ce3b6fea0ff55219feeaf4234854e2bb389756eb437640b585e7b1be4b1011f018015a61edf2aa55be2ff772eba8cdab7fcfaee80d808d
Static task
static1
Behavioral task
behavioral1
Sample
0be2224bd1165cc9feabee8c96b718462eee9382d2f51fd9a0d695278240665f.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0be2224bd1165cc9feabee8c96b718462eee9382d2f51fd9a0d695278240665f.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
0be2224bd1165cc9feabee8c96b718462eee9382d2f51fd9a0d695278240665f
-
Size
92KB
-
MD5
0307cae555d7034ea983046a18c57ff4
-
SHA1
0e8fe5b70035f5d6f77efc4e392ea1d80d12dd02
-
SHA256
0be2224bd1165cc9feabee8c96b718462eee9382d2f51fd9a0d695278240665f
-
SHA512
4796973e86c3ffd1b9ce3b6fea0ff55219feeaf4234854e2bb389756eb437640b585e7b1be4b1011f018015a61edf2aa55be2ff772eba8cdab7fcfaee80d808d
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-