General
-
Target
9803db9cfd154a6322afc81576fdb9701b28a08dbc62bffc64a5caafb2fc97b7
-
Size
216KB
-
Sample
220327-mn12dagef8
-
MD5
4873fff4c9a6944855c420d8bf981b72
-
SHA1
beee15bd9233ac621e14b76db0ae9450151df8d0
-
SHA256
9803db9cfd154a6322afc81576fdb9701b28a08dbc62bffc64a5caafb2fc97b7
-
SHA512
a6ef75ab081e48f1605a99c70296e276667076e244053255024365cdacbcb2fecf078385254cf451dd7ebffcdfe1b99ef3c604ee80fdc808dbff20ee7ec3ee6a
Behavioral task
behavioral1
Sample
9803db9cfd154a6322afc81576fdb9701b28a08dbc62bffc64a5caafb2fc97b7.exe
Resource
win7-20220331-en
Behavioral task
behavioral2
Sample
9803db9cfd154a6322afc81576fdb9701b28a08dbc62bffc64a5caafb2fc97b7.exe
Resource
win10v2004-20220331-en
Malware Config
Targets
-
-
Target
9803db9cfd154a6322afc81576fdb9701b28a08dbc62bffc64a5caafb2fc97b7
-
Size
216KB
-
MD5
4873fff4c9a6944855c420d8bf981b72
-
SHA1
beee15bd9233ac621e14b76db0ae9450151df8d0
-
SHA256
9803db9cfd154a6322afc81576fdb9701b28a08dbc62bffc64a5caafb2fc97b7
-
SHA512
a6ef75ab081e48f1605a99c70296e276667076e244053255024365cdacbcb2fecf078385254cf451dd7ebffcdfe1b99ef3c604ee80fdc808dbff20ee7ec3ee6a
Score10/10-
Sakula Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-