General
-
Target
0403fc465a1b576e09413aeb3b562bd510559ae151e08b8dccee240a28a819c1
-
Size
79KB
-
Sample
220212-npvresdebq
-
MD5
bde21b216843d962169c77c8ca5d47a3
-
SHA1
60f2d63b748ccf0cc7b382163ff835c02b1a7672
-
SHA256
0403fc465a1b576e09413aeb3b562bd510559ae151e08b8dccee240a28a819c1
-
SHA512
76ecdeb4aa504b256951373132b26f9488a5face14500c631023fd86bd8b1c833ff298e2024bed59ef8c4963328f85e04fbc00bb76753d77838caf4d3b2ce99a
Static task
static1
Behavioral task
behavioral1
Sample
0403fc465a1b576e09413aeb3b562bd510559ae151e08b8dccee240a28a819c1.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0403fc465a1b576e09413aeb3b562bd510559ae151e08b8dccee240a28a819c1.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
0403fc465a1b576e09413aeb3b562bd510559ae151e08b8dccee240a28a819c1
-
Size
79KB
-
MD5
bde21b216843d962169c77c8ca5d47a3
-
SHA1
60f2d63b748ccf0cc7b382163ff835c02b1a7672
-
SHA256
0403fc465a1b576e09413aeb3b562bd510559ae151e08b8dccee240a28a819c1
-
SHA512
76ecdeb4aa504b256951373132b26f9488a5face14500c631023fd86bd8b1c833ff298e2024bed59ef8c4963328f85e04fbc00bb76753d77838caf4d3b2ce99a
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-