General
-
Target
093a3c1ddca6a6b211a5d3275127b1ecad3f87be2bdd0b02baa1b6fcba74a820
-
Size
92KB
-
Sample
220212-lpskysagc3
-
MD5
f117f63f767a1b132428be266d4ccf9c
-
SHA1
38cd7f4bf2f5b1254738405f220ba1828378ee1e
-
SHA256
093a3c1ddca6a6b211a5d3275127b1ecad3f87be2bdd0b02baa1b6fcba74a820
-
SHA512
6de4abad0c7aa987f54c73889b18ab4f3b754df754d928ae174ce8e48d1180e4b6fbbf555f60ef105d3ab10c4d82e0a453491419bb271bb4d17d00c6a4664340
Static task
static1
Behavioral task
behavioral1
Sample
093a3c1ddca6a6b211a5d3275127b1ecad3f87be2bdd0b02baa1b6fcba74a820.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
093a3c1ddca6a6b211a5d3275127b1ecad3f87be2bdd0b02baa1b6fcba74a820.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
093a3c1ddca6a6b211a5d3275127b1ecad3f87be2bdd0b02baa1b6fcba74a820
-
Size
92KB
-
MD5
f117f63f767a1b132428be266d4ccf9c
-
SHA1
38cd7f4bf2f5b1254738405f220ba1828378ee1e
-
SHA256
093a3c1ddca6a6b211a5d3275127b1ecad3f87be2bdd0b02baa1b6fcba74a820
-
SHA512
6de4abad0c7aa987f54c73889b18ab4f3b754df754d928ae174ce8e48d1180e4b6fbbf555f60ef105d3ab10c4d82e0a453491419bb271bb4d17d00c6a4664340
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-