General
-
Target
0ae0772a3414c4efb9f19ac7b57e14d48bbeee7567ffe3be94a0036d947907af
-
Size
216KB
-
Sample
220212-kf3h5aabc7
-
MD5
b9de7756c649611bca5e0ed697ab4f2f
-
SHA1
4317b5bfaed9b6bd2566ec0313cca216be63506c
-
SHA256
0ae0772a3414c4efb9f19ac7b57e14d48bbeee7567ffe3be94a0036d947907af
-
SHA512
cf502206a28bcf0732e5a463e2b44ecab014397041554263a576a617f57aac7741ec9c0e06406e20c29dd266dd75c9c1de4e6db1825ab566b932e4d919187859
Static task
static1
Behavioral task
behavioral1
Sample
0ae0772a3414c4efb9f19ac7b57e14d48bbeee7567ffe3be94a0036d947907af.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0ae0772a3414c4efb9f19ac7b57e14d48bbeee7567ffe3be94a0036d947907af.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
0ae0772a3414c4efb9f19ac7b57e14d48bbeee7567ffe3be94a0036d947907af
-
Size
216KB
-
MD5
b9de7756c649611bca5e0ed697ab4f2f
-
SHA1
4317b5bfaed9b6bd2566ec0313cca216be63506c
-
SHA256
0ae0772a3414c4efb9f19ac7b57e14d48bbeee7567ffe3be94a0036d947907af
-
SHA512
cf502206a28bcf0732e5a463e2b44ecab014397041554263a576a617f57aac7741ec9c0e06406e20c29dd266dd75c9c1de4e6db1825ab566b932e4d919187859
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-