Overview

overview

10

Static

static

10

f7c2ac9962...JC.exe

windows7-x64

10

f7c2ac9962...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f7c2ac9962c9ca70a8f9abeb7eff5a87_JC.exe

  • Size

    212KB

  • MD5

    f7c2ac9962c9ca70a8f9abeb7eff5a87

  • SHA1

    ff607cb7f520b2cf649c4ab45e78fc1a64eb5885

  • SHA256

    fa7b5dbf09197f793355e0ebf954291cf05b859ef05971fca8381ced2f280472

  • SHA512

    59a77ee41aeda8c1d7c12600d51543be04d3c22e4d6df9ad4a02fe8d7913def02a1c8de6d90c5e8ea9375313e9ee1384670f4f37a81e93f9b853a99bc1e5d5c1

  • SSDEEP

    1536:RtQFl29mEkE0L1rDEKrxZKF2zf9g2Pl7W/MwbxMX++pdz30rtr8gjXjp0QanBD:k29DkEGRQixVSjLc130BYgjXjpKnBD

Score
10/10
upxsakula

Malware Config

Extracted

Family

sakula

C2

www.polarroute.com

Signatures

  • Sakula family
    sakula
  • Sakula payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f7c2ac9962c9ca70a8f9abeb7eff5a87_JC.exe
    .exe windows:5 windows x86

    4511896d043677e4ab4578dc5bcab5a0


    Headers

    Imports

    Sections