General
-
Target
001348cca8593a61aa1bfffba780f06b7c5ed2741e9cd171992e5451a99a502d
-
Size
80KB
-
Sample
220212-p4zvcsceb5
-
MD5
538b9dd2100c4848bba75eaf564438f9
-
SHA1
6bebffdb5b254b0c7531b8fcc4da3d40d9e7d6ce
-
SHA256
001348cca8593a61aa1bfffba780f06b7c5ed2741e9cd171992e5451a99a502d
-
SHA512
4df099c5a628c9ebd24009212e6701cd9dfa9de5c7a240d0fdaf0de019ea79d4b8cde5274ef076a23c0227709e7cc3b9c230902a472818adda96b2619ce4909a
Static task
static1
Behavioral task
behavioral1
Sample
001348cca8593a61aa1bfffba780f06b7c5ed2741e9cd171992e5451a99a502d.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
001348cca8593a61aa1bfffba780f06b7c5ed2741e9cd171992e5451a99a502d.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
001348cca8593a61aa1bfffba780f06b7c5ed2741e9cd171992e5451a99a502d
-
Size
80KB
-
MD5
538b9dd2100c4848bba75eaf564438f9
-
SHA1
6bebffdb5b254b0c7531b8fcc4da3d40d9e7d6ce
-
SHA256
001348cca8593a61aa1bfffba780f06b7c5ed2741e9cd171992e5451a99a502d
-
SHA512
4df099c5a628c9ebd24009212e6701cd9dfa9de5c7a240d0fdaf0de019ea79d4b8cde5274ef076a23c0227709e7cc3b9c230902a472818adda96b2619ce4909a
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-