General
-
Target
0756429af2cd0532e7ee1f0c08686de1152176ec0fb77dd4194728f36ab849e9
-
Size
192KB
-
Sample
220212-mfhvtscgen
-
MD5
95ed730e1cf85d9176838a55f477b3fc
-
SHA1
fbfdb2d4f7fc39e036c6df43640cffd580df4c4b
-
SHA256
0756429af2cd0532e7ee1f0c08686de1152176ec0fb77dd4194728f36ab849e9
-
SHA512
4c8d425e71b6a76d2f69126496f29f5ab5603d8adb408c79ff81cc1a69edcd3ce15615fd6883eb36438e61cfb17bce600d5169efd50f85fb1e253c3ed726ad5b
Static task
static1
Behavioral task
behavioral1
Sample
0756429af2cd0532e7ee1f0c08686de1152176ec0fb77dd4194728f36ab849e9.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0756429af2cd0532e7ee1f0c08686de1152176ec0fb77dd4194728f36ab849e9.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
0756429af2cd0532e7ee1f0c08686de1152176ec0fb77dd4194728f36ab849e9
-
Size
192KB
-
MD5
95ed730e1cf85d9176838a55f477b3fc
-
SHA1
fbfdb2d4f7fc39e036c6df43640cffd580df4c4b
-
SHA256
0756429af2cd0532e7ee1f0c08686de1152176ec0fb77dd4194728f36ab849e9
-
SHA512
4c8d425e71b6a76d2f69126496f29f5ab5603d8adb408c79ff81cc1a69edcd3ce15615fd6883eb36438e61cfb17bce600d5169efd50f85fb1e253c3ed726ad5b
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-