Overview

overview

10

Static

static

10

0364d40f6d...10.exe

windows7-x64

10

0364d40f6d...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0364d40f6d2b412a5abd49f3ecde9e10.bin

  • Size

    96KB

  • MD5

    0364d40f6d2b412a5abd49f3ecde9e10

  • SHA1

    0539adc8646842fccb198750f78c201ef0f1bedd

  • SHA256

    09f8bdd7041169a225593f93692e5f6a5610de3339396cd1212349978a05001d

  • SHA512

    acad97f791b7682d39d329eb7fc4efc94e764ed41b74f06a0c3b9eb3c56b950bf49ff2a9a1812f7c707122c1c3520debfd31eabf8e674fb151621cb1540d5971

  • SSDEEP

    1536:rODhc+yBJW0WTU5XM1nJqjp0DNDCkruZqcuOuz/xSL:ku+kJHB8FJqjpq7uZwOuz/xSL

Score
10/10
upxsakula

Malware Config

Extracted

Family

sakula

C2

www.polarroute.com

Signatures

  • Sakula family
    sakula
  • Sakula payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0364d40f6d2b412a5abd49f3ecde9e10.bin
    .exe windows:5 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86


    Headers

    Sections