General
-
Target
0aefc66dffe23351f7fca601b899422490198be2bf00720871e4e1e295357ca2
-
Size
176KB
-
Sample
220212-ke6t6aabb7
-
MD5
ea60be8ec92728f912df128d5e9447b8
-
SHA1
b6882f781ee2a07e4505d3ad6e3a2eda726b8678
-
SHA256
0aefc66dffe23351f7fca601b899422490198be2bf00720871e4e1e295357ca2
-
SHA512
61ac74f7b1889ef7e9465536dfa224321e5033270edf7e7d2ce5beb5501bee98159178bc942d63f96f4b9635025f373cee7aa6f1b831ca7ccc953bc3007559c4
Static task
static1
Behavioral task
behavioral1
Sample
0aefc66dffe23351f7fca601b899422490198be2bf00720871e4e1e295357ca2.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0aefc66dffe23351f7fca601b899422490198be2bf00720871e4e1e295357ca2.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
0aefc66dffe23351f7fca601b899422490198be2bf00720871e4e1e295357ca2
-
Size
176KB
-
MD5
ea60be8ec92728f912df128d5e9447b8
-
SHA1
b6882f781ee2a07e4505d3ad6e3a2eda726b8678
-
SHA256
0aefc66dffe23351f7fca601b899422490198be2bf00720871e4e1e295357ca2
-
SHA512
61ac74f7b1889ef7e9465536dfa224321e5033270edf7e7d2ce5beb5501bee98159178bc942d63f96f4b9635025f373cee7aa6f1b831ca7ccc953bc3007559c4
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-