General
-
Target
0906f2cfed2c4db708c6ca661192cf0d5aaa4d00efad9a93f64a3121bdb5c4a3
-
Size
188KB
-
Sample
220212-lskphsage6
-
MD5
af1c1e287a363fe787718b79510f5bf0
-
SHA1
80490f9f333e88d1b0f097f1fb353f257cd56608
-
SHA256
0906f2cfed2c4db708c6ca661192cf0d5aaa4d00efad9a93f64a3121bdb5c4a3
-
SHA512
be3b0c6e2bbb1d5a0f6f5ae9255f97a3a7bdd165fe457f52e51464882a96ff06629e671abad8f57c25b1a5394444088fd89ad68aff84b39dd9f95bd3458d7a6c
Static task
static1
Behavioral task
behavioral1
Sample
0906f2cfed2c4db708c6ca661192cf0d5aaa4d00efad9a93f64a3121bdb5c4a3.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0906f2cfed2c4db708c6ca661192cf0d5aaa4d00efad9a93f64a3121bdb5c4a3.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
0906f2cfed2c4db708c6ca661192cf0d5aaa4d00efad9a93f64a3121bdb5c4a3
-
Size
188KB
-
MD5
af1c1e287a363fe787718b79510f5bf0
-
SHA1
80490f9f333e88d1b0f097f1fb353f257cd56608
-
SHA256
0906f2cfed2c4db708c6ca661192cf0d5aaa4d00efad9a93f64a3121bdb5c4a3
-
SHA512
be3b0c6e2bbb1d5a0f6f5ae9255f97a3a7bdd165fe457f52e51464882a96ff06629e671abad8f57c25b1a5394444088fd89ad68aff84b39dd9f95bd3458d7a6c
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-