Overview

overview

10

Static

static

10

2752-2-0x0...ry.exe

windows7-x64

3

2752-2-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2752-2-0x0000000000400000-0x000000000040B000-memory.dmp

  • Size

    44KB

  • Sample

    231108-q185asbh4x

  • MD5

    067358f3b02b484bfb88efceff5fa369

  • SHA1

    0a8e1512c54102de8a7575455ca6c004f2889119

  • SHA256

    251674fd02565616303ef51957bdda70d4c69434059b176c975cf4d2904f8e79

  • SHA512

    ff252efe4ac9c6be17f9023c2c3a18b1d66b89a65f3e1084c008b8f1ed177dca1470d4bc2b5cc399d8140aa3075c0f04d75cb995071862687be9efc06c2ed63c

  • SSDEEP

    384:xhnyaz2ypQY5ZkVtqvhyY3Q6oVxYJaCY3WqPakgUt11iyBrUo7MgImBH+Te:GnHY5Zkf4hyYtoVxYHm1oUt1vnhBl

Score
10/10
sakula

Malware Config

Extracted

Family

sakula

C2

http://vpn.premrera.com:443/viewpre.asp?cstring=%s&tom=%d&id=%d

http://vpn.premrera.com:443/photo/%s.jpg?id=%d

http://173.254.226.212:443/viewpre.asp?cstring=%s&tom=%d&id=%d

http://173.254.226.212:443/photo/%s.jpg?id=%d

Targets

    • Target

      2752-2-0x0000000000400000-0x000000000040B000-memory.dmp

    • Size

      44KB

    • MD5

      067358f3b02b484bfb88efceff5fa369

    • SHA1

      0a8e1512c54102de8a7575455ca6c004f2889119

    • SHA256

      251674fd02565616303ef51957bdda70d4c69434059b176c975cf4d2904f8e79

    • SHA512

      ff252efe4ac9c6be17f9023c2c3a18b1d66b89a65f3e1084c008b8f1ed177dca1470d4bc2b5cc399d8140aa3075c0f04d75cb995071862687be9efc06c2ed63c

    • SSDEEP

      384:xhnyaz2ypQY5ZkVtqvhyY3Q6oVxYJaCY3WqPakgUt11iyBrUo7MgImBH+Te:GnHY5Zkf4hyYtoVxYHm1oUt1vnhBl

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks