sakula

Resubmissions

24/02/2022, 11:09

220224-m8635achc510

30/09/2021, 07:38

210930-jgeb9aghd58

Sharing

Copy URL Twitter E-mail

General

Target
efb2aac42ae3c336beae35ea0063d1cec78261857a246693fd9d91a233b43636
Size 3.9MB
Sample220224-m8635achc5
SHA256 efb2aac42ae3c336beae35ea0063d1cec78261857a246693fd9d91a233b43636
MD5 0c91f541c351849c1b48be81b7e4f197
SHA1 bda480d45467f44a36c6ac046a08b0b3b2e6bf83
SHA512 940176cdb87ada4590adb2ffa6fdb5694b950f7dc5f5a2b7f3d44b619de577efc46681e0b0e707137996b7aceec01e722804f2b2a046db3b7f45e7dda46e9b1c
MD5 SHA1 SHA512

Score

10^/10

Malware Config

Targets

- Target
  efb2aac42ae3c336beae35ea0063d1cec78261857a246693fd9d91a233b43636
- Size 3.9MB
- SHA256 efb2aac42ae3c336beae35ea0063d1cec78261857a246693fd9d91a233b43636
- MD5 0c91f541c351849c1b48be81b7e4f197
- SHA1 bda480d45467f44a36c6ac046a08b0b3b2e6bf83
- SHA512 940176cdb87ada4590adb2ffa6fdb5694b950f7dc5f5a2b7f3d44b619de577efc46681e0b0e707137996b7aceec01e722804f2b2a046db3b7f45e7dda46e9b1c
- MD5 SHA1 SHA512
Score

10^/10

sakula persistence rat trojan
- Sakula
  Sakula is a remote access trojan with various capabilities.
  trojan rat sakula
- Sakula Payload
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

Remote System Discovery

T1018

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Sakula Payload

Executes dropped EXE

Checks computer location settings

Deletes itself

Loads dropped DLL

Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2

behavioral3