General
-
Target
0638553617c7dcfe21f3e4f4cebf5dad08fa5c23847ad3a72c40d260fbbe1e26
-
Size
216KB
-
Sample
220212-mtbzfabda4
-
MD5
0255235f956389bfe52a1234c4fe873a
-
SHA1
c2d76e4c77748738884d3cb619a71c3598fd4ac3
-
SHA256
0638553617c7dcfe21f3e4f4cebf5dad08fa5c23847ad3a72c40d260fbbe1e26
-
SHA512
a1e900ae3d7bd6f0763623924d078ccd9cee1d64519d25dd86b9e86895a45f2164eb9c58ac469c8cf371dba096effd8b8bc4bc892e6358192f6f61bed075dc9b
Static task
static1
Behavioral task
behavioral1
Sample
0638553617c7dcfe21f3e4f4cebf5dad08fa5c23847ad3a72c40d260fbbe1e26.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0638553617c7dcfe21f3e4f4cebf5dad08fa5c23847ad3a72c40d260fbbe1e26.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
0638553617c7dcfe21f3e4f4cebf5dad08fa5c23847ad3a72c40d260fbbe1e26
-
Size
216KB
-
MD5
0255235f956389bfe52a1234c4fe873a
-
SHA1
c2d76e4c77748738884d3cb619a71c3598fd4ac3
-
SHA256
0638553617c7dcfe21f3e4f4cebf5dad08fa5c23847ad3a72c40d260fbbe1e26
-
SHA512
a1e900ae3d7bd6f0763623924d078ccd9cee1d64519d25dd86b9e86895a45f2164eb9c58ac469c8cf371dba096effd8b8bc4bc892e6358192f6f61bed075dc9b
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-