General
-
Target
07b33d13cfca49da3475dfcf29210ce4b58b489bf75e6371b0bf88f42649f64f
-
Size
216KB
-
Sample
220212-maqy9abaf7
-
MD5
a967b03819161eba17746fe94e3429ff
-
SHA1
075a8a04ef296463109828e8ca7ada66c63c45cd
-
SHA256
07b33d13cfca49da3475dfcf29210ce4b58b489bf75e6371b0bf88f42649f64f
-
SHA512
3830d2eb295d294e0e21f1347c25f27eb6ebb3490608a8d68647d8809c09e9890fe5c2cf92ac455ed96aa85742613f01c754c313f6addd23283d0d1f0288306a
Static task
static1
Behavioral task
behavioral1
Sample
07b33d13cfca49da3475dfcf29210ce4b58b489bf75e6371b0bf88f42649f64f.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
07b33d13cfca49da3475dfcf29210ce4b58b489bf75e6371b0bf88f42649f64f.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
07b33d13cfca49da3475dfcf29210ce4b58b489bf75e6371b0bf88f42649f64f
-
Size
216KB
-
MD5
a967b03819161eba17746fe94e3429ff
-
SHA1
075a8a04ef296463109828e8ca7ada66c63c45cd
-
SHA256
07b33d13cfca49da3475dfcf29210ce4b58b489bf75e6371b0bf88f42649f64f
-
SHA512
3830d2eb295d294e0e21f1347c25f27eb6ebb3490608a8d68647d8809c09e9890fe5c2cf92ac455ed96aa85742613f01c754c313f6addd23283d0d1f0288306a
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-