General
-
Target
c707e190d65c58e8ea738388879202bc_JC.exe
-
Size
92KB
-
Sample
231012-sg3vaafd4v
-
MD5
c707e190d65c58e8ea738388879202bc
-
SHA1
c7c67f5278183c72abe574ec73039a3dde3a9469
-
SHA256
6e4606db35e67d5c39dede0e0acae67b0fc150581d0268263dc0ac15cbd86aae
-
SHA512
c3025d3818efc21cae7d59282713f3222f0fd912615572b8e0867882a4e884a843b52e24ad542400e994c1696cfc0ef4c82081fe17fcf687d9cac1cbc435741e
-
SSDEEP
1536:TJbCiJVkgMaT2itTkjoRXnM48dXFajVPYxCEtkz30rtr0:9bfVk29te2jqxCEtg30BQ
Behavioral task
behavioral1
Sample
c707e190d65c58e8ea738388879202bc_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c707e190d65c58e8ea738388879202bc_JC.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
sakula
www.savmpet.com
Targets
-
-
Target
c707e190d65c58e8ea738388879202bc_JC.exe
-
Size
92KB
-
MD5
c707e190d65c58e8ea738388879202bc
-
SHA1
c7c67f5278183c72abe574ec73039a3dde3a9469
-
SHA256
6e4606db35e67d5c39dede0e0acae67b0fc150581d0268263dc0ac15cbd86aae
-
SHA512
c3025d3818efc21cae7d59282713f3222f0fd912615572b8e0867882a4e884a843b52e24ad542400e994c1696cfc0ef4c82081fe17fcf687d9cac1cbc435741e
-
SSDEEP
1536:TJbCiJVkgMaT2itTkjoRXnM48dXFajVPYxCEtkz30rtr0:9bfVk29te2jqxCEtg30BQ
Score10/10-
Sakula payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-