General
-
Target
NEAS.fcd95c36c15206b4e16a09f4e5ebc960.exe
-
Size
40KB
-
Sample
231016-xfy7xsef7x
-
MD5
fcd95c36c15206b4e16a09f4e5ebc960
-
SHA1
7cdf76b1fb29a154c897a4817ffa488c3de0a566
-
SHA256
fef2acf953872c647eed62a75f0a70dab2c2ace2fbf04519df01b68bfdf9e590
-
SHA512
19783deb866ebb206db025f6868b205d95955f2ccde8de8135b0b33cb99c9f4158826a600fd98b33582745bad0a95f445c2a2b2812398838307c702c885e59a1
-
SSDEEP
768:q7Xezc/T6Zp14hyYtoVxYF9mHfCBJTAIO3OtYVn:G6zqhyYtkYW/CPnO3P
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.fcd95c36c15206b4e16a09f4e5ebc960.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.fcd95c36c15206b4e16a09f4e5ebc960.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
sakula
http://www.we11point.com:443/view.asp?cookie=%s&type=%d&vid=%d
http://www.we11point.com:443/photo/%s.jpg?vid=%d
Targets
-
-
Target
NEAS.fcd95c36c15206b4e16a09f4e5ebc960.exe
-
Size
40KB
-
MD5
fcd95c36c15206b4e16a09f4e5ebc960
-
SHA1
7cdf76b1fb29a154c897a4817ffa488c3de0a566
-
SHA256
fef2acf953872c647eed62a75f0a70dab2c2ace2fbf04519df01b68bfdf9e590
-
SHA512
19783deb866ebb206db025f6868b205d95955f2ccde8de8135b0b33cb99c9f4158826a600fd98b33582745bad0a95f445c2a2b2812398838307c702c885e59a1
-
SSDEEP
768:q7Xezc/T6Zp14hyYtoVxYF9mHfCBJTAIO3OtYVn:G6zqhyYtkYW/CPnO3P
Score10/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-