General
-
Target
07ddcb1d946b111ddccf574da599e4b1cfc7082b62f9c0ac75fc316aef0dc37c
-
Size
99KB
-
Sample
220212-l78pwscfdp
-
MD5
77a310318bd89ac4a1e291862380e70a
-
SHA1
f37aec3c4eb6b1bb33582606bc5e807bf22d2fa4
-
SHA256
07ddcb1d946b111ddccf574da599e4b1cfc7082b62f9c0ac75fc316aef0dc37c
-
SHA512
8a789e4c938c6c718c372e3035ed0b755a752dfbfc38ec4346c025e95d4a4a32daf30fb28eb7fddb94237e62025d0696f189fc25f7c389cadc9f2d45ebbd78c6
Static task
static1
Behavioral task
behavioral1
Sample
07ddcb1d946b111ddccf574da599e4b1cfc7082b62f9c0ac75fc316aef0dc37c.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
07ddcb1d946b111ddccf574da599e4b1cfc7082b62f9c0ac75fc316aef0dc37c.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
07ddcb1d946b111ddccf574da599e4b1cfc7082b62f9c0ac75fc316aef0dc37c
-
Size
99KB
-
MD5
77a310318bd89ac4a1e291862380e70a
-
SHA1
f37aec3c4eb6b1bb33582606bc5e807bf22d2fa4
-
SHA256
07ddcb1d946b111ddccf574da599e4b1cfc7082b62f9c0ac75fc316aef0dc37c
-
SHA512
8a789e4c938c6c718c372e3035ed0b755a752dfbfc38ec4346c025e95d4a4a32daf30fb28eb7fddb94237e62025d0696f189fc25f7c389cadc9f2d45ebbd78c6
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-