General
-
Target
0481f34f7667cb4af4d586aca643aa1a4dcd3166c336141d1bb2e498c4df61ed
-
Size
216KB
-
Sample
220212-nhefvsbfh7
-
MD5
34f659c8058e53f21f8081f0e3b9f250
-
SHA1
d860be813183971f7710455a40a7544501974705
-
SHA256
0481f34f7667cb4af4d586aca643aa1a4dcd3166c336141d1bb2e498c4df61ed
-
SHA512
2dddb891b6845295570ec80922b2139d8dd5dc1035005898182e10eeb412aef2944404aac956e13bbaf4c6e58ef515b39592a131153248a1234ae070efde32ca
Static task
static1
Behavioral task
behavioral1
Sample
0481f34f7667cb4af4d586aca643aa1a4dcd3166c336141d1bb2e498c4df61ed.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0481f34f7667cb4af4d586aca643aa1a4dcd3166c336141d1bb2e498c4df61ed.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
0481f34f7667cb4af4d586aca643aa1a4dcd3166c336141d1bb2e498c4df61ed
-
Size
216KB
-
MD5
34f659c8058e53f21f8081f0e3b9f250
-
SHA1
d860be813183971f7710455a40a7544501974705
-
SHA256
0481f34f7667cb4af4d586aca643aa1a4dcd3166c336141d1bb2e498c4df61ed
-
SHA512
2dddb891b6845295570ec80922b2139d8dd5dc1035005898182e10eeb412aef2944404aac956e13bbaf4c6e58ef515b39592a131153248a1234ae070efde32ca
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-