General
-
Target
03130cbeaab5d00c661ebe54f02287f93b8a481dfb9b568738330e25dc4447bf
-
Size
99KB
-
Sample
220212-n27xhsdfgp
-
MD5
d7db973aa4fed3a90ebc74cd3c849af2
-
SHA1
32337254d8e95d083df86e5889e332f757314128
-
SHA256
03130cbeaab5d00c661ebe54f02287f93b8a481dfb9b568738330e25dc4447bf
-
SHA512
6ae995d96bab8c59ae603f2df5e71cc3b12f74d06201b44db25758c5b2c650a640afead5cd1a40a2e2cca25ee97ea29477e15955750bbdb945549441e1cdb004
Static task
static1
Behavioral task
behavioral1
Sample
03130cbeaab5d00c661ebe54f02287f93b8a481dfb9b568738330e25dc4447bf.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
03130cbeaab5d00c661ebe54f02287f93b8a481dfb9b568738330e25dc4447bf.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
03130cbeaab5d00c661ebe54f02287f93b8a481dfb9b568738330e25dc4447bf
-
Size
99KB
-
MD5
d7db973aa4fed3a90ebc74cd3c849af2
-
SHA1
32337254d8e95d083df86e5889e332f757314128
-
SHA256
03130cbeaab5d00c661ebe54f02287f93b8a481dfb9b568738330e25dc4447bf
-
SHA512
6ae995d96bab8c59ae603f2df5e71cc3b12f74d06201b44db25758c5b2c650a640afead5cd1a40a2e2cca25ee97ea29477e15955750bbdb945549441e1cdb004
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-