General
-
Target
d496522fd93ca1cb2bca9979b7868a39cbfb534ba328136a1d674dd8e88cd497.exe
-
Size
222KB
-
Sample
221017-kgfqrabbd2
-
MD5
a999566216b6111e7e3a79cc38ea7275
-
SHA1
e7128d2bf65d01607ce1f636b99c8efeb08828f0
-
SHA256
d496522fd93ca1cb2bca9979b7868a39cbfb534ba328136a1d674dd8e88cd497
-
SHA512
445ca5235b0abe97b495cea68e5c5f805b096c8224a9622770ff5d289321a669a9ab90c90f22c56d9f145853eacac4be21d6391b46ee12ae061c8b639c877d2e
-
SSDEEP
6144:n29qRfVSnfj30BmhqC8WSr24AyqaLjLj64fm:zRfQniC8WSa4C6L2wm
Behavioral task
behavioral1
Sample
d496522fd93ca1cb2bca9979b7868a39cbfb534ba328136a1d674dd8e88cd497.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d496522fd93ca1cb2bca9979b7868a39cbfb534ba328136a1d674dd8e88cd497.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
d496522fd93ca1cb2bca9979b7868a39cbfb534ba328136a1d674dd8e88cd497.exe
-
Size
222KB
-
MD5
a999566216b6111e7e3a79cc38ea7275
-
SHA1
e7128d2bf65d01607ce1f636b99c8efeb08828f0
-
SHA256
d496522fd93ca1cb2bca9979b7868a39cbfb534ba328136a1d674dd8e88cd497
-
SHA512
445ca5235b0abe97b495cea68e5c5f805b096c8224a9622770ff5d289321a669a9ab90c90f22c56d9f145853eacac4be21d6391b46ee12ae061c8b639c877d2e
-
SSDEEP
6144:n29qRfVSnfj30BmhqC8WSr24AyqaLjLj64fm:zRfQniC8WSa4C6L2wm
Score10/10-
Sakula payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-