General
-
Target
NEAS.582caefe13bda3894d0ebbf6fa396ca0_JC.exe
-
Size
72KB
-
Sample
231026-ye8kmsfb81
-
MD5
582caefe13bda3894d0ebbf6fa396ca0
-
SHA1
535061c4120076749220b134fe7834d5c1be5725
-
SHA256
5de08d92f9bec7c08bf0ea54746c1588c656b2d071fb9fd3a54c0527e2b130b8
-
SHA512
75e71e5adc468118eaf1cd5ec832bad0ffb824a534c0a0a862c71a15e49f3b4f5d9356bb698eb28c5f3c5b198149789ea77b40e6929e449ae4f3e2186fd1faa2
-
SSDEEP
768:q7Xezc/T6Zp14hyYtoVxYF9mHfCBJTAIO3OtYVW6QptwyR:G6zqhyYtkYW/CPnO3ajwyR
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.582caefe13bda3894d0ebbf6fa396ca0_JC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.582caefe13bda3894d0ebbf6fa396ca0_JC.exe
Resource
win10v2004-20231020-en
Malware Config
Extracted
sakula
http://www.we11point.com:443/view.asp?cookie=%s&type=%d&vid=%d
http://www.we11point.com:443/photo/%s.jpg?vid=%d
Targets
-
-
Target
NEAS.582caefe13bda3894d0ebbf6fa396ca0_JC.exe
-
Size
72KB
-
MD5
582caefe13bda3894d0ebbf6fa396ca0
-
SHA1
535061c4120076749220b134fe7834d5c1be5725
-
SHA256
5de08d92f9bec7c08bf0ea54746c1588c656b2d071fb9fd3a54c0527e2b130b8
-
SHA512
75e71e5adc468118eaf1cd5ec832bad0ffb824a534c0a0a862c71a15e49f3b4f5d9356bb698eb28c5f3c5b198149789ea77b40e6929e449ae4f3e2186fd1faa2
-
SSDEEP
768:q7Xezc/T6Zp14hyYtoVxYF9mHfCBJTAIO3OtYVW6QptwyR:G6zqhyYtkYW/CPnO3ajwyR
Score10/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-