General
-
Target
0283be7d16a9605bb176ffa3ca09f84f80cd6bb725acb01177b5f0ae0fe6d98b
-
Size
120KB
-
Sample
220212-n87kbscag3
-
MD5
415dc9abdc5da99f2babb7650efa9ed6
-
SHA1
74719963f147beebde816ae0973d87c7ba7f9c57
-
SHA256
0283be7d16a9605bb176ffa3ca09f84f80cd6bb725acb01177b5f0ae0fe6d98b
-
SHA512
c3872afb8581c32387a1231a971c2d209f402de30c36d67c05deeb0f12ba47247f34f78fe68925725081f88626074140a0fd23b2bdbd60c4f6c4b203240157cc
Static task
static1
Behavioral task
behavioral1
Sample
0283be7d16a9605bb176ffa3ca09f84f80cd6bb725acb01177b5f0ae0fe6d98b.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0283be7d16a9605bb176ffa3ca09f84f80cd6bb725acb01177b5f0ae0fe6d98b.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
0283be7d16a9605bb176ffa3ca09f84f80cd6bb725acb01177b5f0ae0fe6d98b
-
Size
120KB
-
MD5
415dc9abdc5da99f2babb7650efa9ed6
-
SHA1
74719963f147beebde816ae0973d87c7ba7f9c57
-
SHA256
0283be7d16a9605bb176ffa3ca09f84f80cd6bb725acb01177b5f0ae0fe6d98b
-
SHA512
c3872afb8581c32387a1231a971c2d209f402de30c36d67c05deeb0f12ba47247f34f78fe68925725081f88626074140a0fd23b2bdbd60c4f6c4b203240157cc
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-