General
-
Target
035676efd67bc34354bab7d13c1743c9bf853dd4ef491d002abc656d7058cbf2
-
Size
92KB
-
Sample
220212-nzcnladfdl
-
MD5
dba0251115ca7371bbe443a3f353dd1f
-
SHA1
85a4ff509730baf594718b88ce278e49508c8276
-
SHA256
035676efd67bc34354bab7d13c1743c9bf853dd4ef491d002abc656d7058cbf2
-
SHA512
3863ee0edd432af4a07de9ec3147caca719142875f155b290cd2540439f5167935505826b0dfcb23c789a9cb66f475d94a6eea880f87e8968c0179df1eadb999
Static task
static1
Behavioral task
behavioral1
Sample
035676efd67bc34354bab7d13c1743c9bf853dd4ef491d002abc656d7058cbf2.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
035676efd67bc34354bab7d13c1743c9bf853dd4ef491d002abc656d7058cbf2.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
035676efd67bc34354bab7d13c1743c9bf853dd4ef491d002abc656d7058cbf2
-
Size
92KB
-
MD5
dba0251115ca7371bbe443a3f353dd1f
-
SHA1
85a4ff509730baf594718b88ce278e49508c8276
-
SHA256
035676efd67bc34354bab7d13c1743c9bf853dd4ef491d002abc656d7058cbf2
-
SHA512
3863ee0edd432af4a07de9ec3147caca719142875f155b290cd2540439f5167935505826b0dfcb23c789a9cb66f475d94a6eea880f87e8968c0179df1eadb999
Score10/10-
Sakula Payload
-
suricata: ET MALWARE Sakula/Mivast RAT CnC Beacon 1
suricata: ET MALWARE Sakula/Mivast RAT CnC Beacon 1
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-