General
-
Target
07fc84b90f27e51cdd5289edb2572e75d2d2d027b8ee9a8dec037dae8b7f5c24
-
Size
216KB
-
Sample
220212-l6yhjacfcj
-
MD5
8d6b792d98ae99f8b019e922ae79f9e0
-
SHA1
a42198f1314d8797b4d9f084fe8a4048d7ed1fe1
-
SHA256
07fc84b90f27e51cdd5289edb2572e75d2d2d027b8ee9a8dec037dae8b7f5c24
-
SHA512
8a94144124d3aa74cdb474b59e382111e06c45bbbe10322e7506f84f64ba3faff26b051c49ef4669a6ccf793f7ad9a00868843e77a6d57d26edfd7a934f60100
Static task
static1
Behavioral task
behavioral1
Sample
07fc84b90f27e51cdd5289edb2572e75d2d2d027b8ee9a8dec037dae8b7f5c24.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
07fc84b90f27e51cdd5289edb2572e75d2d2d027b8ee9a8dec037dae8b7f5c24.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
07fc84b90f27e51cdd5289edb2572e75d2d2d027b8ee9a8dec037dae8b7f5c24
-
Size
216KB
-
MD5
8d6b792d98ae99f8b019e922ae79f9e0
-
SHA1
a42198f1314d8797b4d9f084fe8a4048d7ed1fe1
-
SHA256
07fc84b90f27e51cdd5289edb2572e75d2d2d027b8ee9a8dec037dae8b7f5c24
-
SHA512
8a94144124d3aa74cdb474b59e382111e06c45bbbe10322e7506f84f64ba3faff26b051c49ef4669a6ccf793f7ad9a00868843e77a6d57d26edfd7a934f60100
Score10/10-
Sakula Payload
-
suricata: ET MALWARE Sakula/Mivast RAT CnC Beacon 1
suricata: ET MALWARE Sakula/Mivast RAT CnC Beacon 1
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-