General
-
Target
09ce594eb8205070b4a98224eaaac9bdfe5b22aa8659f301d2842d381759893b
-
Size
80KB
-
Sample
220212-lg6slsafd3
-
MD5
888242f3c35c9276d80991e01fd9f530
-
SHA1
09c134a1656266c0fdf0764ba8d3fe6187476221
-
SHA256
09ce594eb8205070b4a98224eaaac9bdfe5b22aa8659f301d2842d381759893b
-
SHA512
30c856106b2d0d1ec8fd20bb620824585565df16a20afbe37aa6178b6e3c360567c0e7c65a6780da101cdac569658e24bfe838aae475a16c18202d8945fde048
Static task
static1
Behavioral task
behavioral1
Sample
09ce594eb8205070b4a98224eaaac9bdfe5b22aa8659f301d2842d381759893b.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
09ce594eb8205070b4a98224eaaac9bdfe5b22aa8659f301d2842d381759893b.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
09ce594eb8205070b4a98224eaaac9bdfe5b22aa8659f301d2842d381759893b
-
Size
80KB
-
MD5
888242f3c35c9276d80991e01fd9f530
-
SHA1
09c134a1656266c0fdf0764ba8d3fe6187476221
-
SHA256
09ce594eb8205070b4a98224eaaac9bdfe5b22aa8659f301d2842d381759893b
-
SHA512
30c856106b2d0d1ec8fd20bb620824585565df16a20afbe37aa6178b6e3c360567c0e7c65a6780da101cdac569658e24bfe838aae475a16c18202d8945fde048
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-