sakula | 07410a339de15e2fc03a88605eb86eb11082da17882ba34e3886106fe8589208 | Triage

Submit
Reports

Overview

overview

Static

static

07410a339d...08.exe

windows7_x64

07410a339d...08.exe

windows10-2004_x64

Sharing

General

Target

07410a339de15e2fc03a88605eb86eb11082da17882ba34e3886106fe8589208
Size

60KB
Sample

220212-mf9zbabbd7
MD5

97835e25ffc45805137c32276742aeba
SHA1

556f2595df84b250076bf7dcad7c77fc8e262e31
SHA256

07410a339de15e2fc03a88605eb86eb11082da17882ba34e3886106fe8589208
SHA512

481b70e995da63913ad2089682d71461e86c55d82937100db8b7a61be8e1da3fd2c4aeaec2efafe13e93957bd2c89db2aa7b62c1c0855d157065b6d61bfe0137

Score

10^/10

sakula persistence rat trojan

Static task

static1

Behavioral task

behavioral1

Sample

07410a339de15e2fc03a88605eb86eb11082da17882ba34e3886106fe8589208.exe

Resource

win7-en-20211208

sakula persistence rat trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

07410a339de15e2fc03a88605eb86eb11082da17882ba34e3886106fe8589208.exe

Resource

win10v2004-en-20220112

sakula persistence rat trojan

windows10-2004_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  07410a339de15e2fc03a88605eb86eb11082da17882ba34e3886106fe8589208
- Size
  
  60KB
- MD5
  
  97835e25ffc45805137c32276742aeba
- SHA1
  
  556f2595df84b250076bf7dcad7c77fc8e262e31
- SHA256
  
  07410a339de15e2fc03a88605eb86eb11082da17882ba34e3886106fe8589208
- SHA512
  
  481b70e995da63913ad2089682d71461e86c55d82937100db8b7a61be8e1da3fd2c4aeaec2efafe13e93957bd2c89db2aa7b62c1c0855d157065b6d61bfe0137
Score

10^/10

sakula persistence rat trojan
- Sakula
  Sakula is a remote access trojan with various capabilities.
  trojan rat sakula
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

sakulapersistencerattrojan

behavioral2

sakulapersistencerattrojan

© 2018-2024

Terms | Privacy