General
-
Target
082c765372b65aee6469edde4954229ffd29d1542a79cbd9ecd9f7f3e6d778ca
-
Size
191KB
-
Sample
220212-l4gf8scehm
-
MD5
0cbe6009fcd1e715a938ee4f05e036f6
-
SHA1
4b707b7cb034d58c03c7a9fdcbe5d8c1433484ea
-
SHA256
082c765372b65aee6469edde4954229ffd29d1542a79cbd9ecd9f7f3e6d778ca
-
SHA512
b0815b6606554d2cce73d2a36a8e38d69ebf774a4ad24460db5c4c3aee2c92bfa60fa11bba428720a9d46396b4228c94d793de4f0ab5a6281ab42d05bdff315f
Static task
static1
Behavioral task
behavioral1
Sample
082c765372b65aee6469edde4954229ffd29d1542a79cbd9ecd9f7f3e6d778ca.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
082c765372b65aee6469edde4954229ffd29d1542a79cbd9ecd9f7f3e6d778ca.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
082c765372b65aee6469edde4954229ffd29d1542a79cbd9ecd9f7f3e6d778ca
-
Size
191KB
-
MD5
0cbe6009fcd1e715a938ee4f05e036f6
-
SHA1
4b707b7cb034d58c03c7a9fdcbe5d8c1433484ea
-
SHA256
082c765372b65aee6469edde4954229ffd29d1542a79cbd9ecd9f7f3e6d778ca
-
SHA512
b0815b6606554d2cce73d2a36a8e38d69ebf774a4ad24460db5c4c3aee2c92bfa60fa11bba428720a9d46396b4228c94d793de4f0ab5a6281ab42d05bdff315f
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-