General
-
Target
0af7a4c943fc60a2dbf6e3ba0d3f7d7e37e07c096870e51b051612d044e3cee9
-
Size
216KB
-
Sample
220212-keg6ssabb3
-
MD5
f87e02dfa8b4c18ce680c415a188368f
-
SHA1
867363b6c81840f141a92b97a6b000ccfa9ae510
-
SHA256
0af7a4c943fc60a2dbf6e3ba0d3f7d7e37e07c096870e51b051612d044e3cee9
-
SHA512
f92f359bb714afd29367b8604351d2c6332f4d3fd70b399fdadc23cd9bd6265fe73b90dbc8a11ceb6fef15ec7b7ea1eb97dc2c6c78ef69e193c72c95b6ab1da7
Static task
static1
Behavioral task
behavioral1
Sample
0af7a4c943fc60a2dbf6e3ba0d3f7d7e37e07c096870e51b051612d044e3cee9.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0af7a4c943fc60a2dbf6e3ba0d3f7d7e37e07c096870e51b051612d044e3cee9.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
0af7a4c943fc60a2dbf6e3ba0d3f7d7e37e07c096870e51b051612d044e3cee9
-
Size
216KB
-
MD5
f87e02dfa8b4c18ce680c415a188368f
-
SHA1
867363b6c81840f141a92b97a6b000ccfa9ae510
-
SHA256
0af7a4c943fc60a2dbf6e3ba0d3f7d7e37e07c096870e51b051612d044e3cee9
-
SHA512
f92f359bb714afd29367b8604351d2c6332f4d3fd70b399fdadc23cd9bd6265fe73b90dbc8a11ceb6fef15ec7b7ea1eb97dc2c6c78ef69e193c72c95b6ab1da7
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-