Overview

overview

10

Static

static

10

2752-2-0x0...ry.exe

windows7-x64

3

2752-2-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2752-2-0x0000000000400000-0x000000000040B000-memory.dmp

  • Size

    44KB

  • MD5

    067358f3b02b484bfb88efceff5fa369

  • SHA1

    0a8e1512c54102de8a7575455ca6c004f2889119

  • SHA256

    251674fd02565616303ef51957bdda70d4c69434059b176c975cf4d2904f8e79

  • SHA512

    ff252efe4ac9c6be17f9023c2c3a18b1d66b89a65f3e1084c008b8f1ed177dca1470d4bc2b5cc399d8140aa3075c0f04d75cb995071862687be9efc06c2ed63c

  • SSDEEP

    384:xhnyaz2ypQY5ZkVtqvhyY3Q6oVxYJaCY3WqPakgUt11iyBrUo7MgImBH+Te:GnHY5Zkf4hyYtoVxYHm1oUt1vnhBl

Score
10/10
sakula

Malware Config

Extracted

Family

sakula

C2

http://vpn.premrera.com:443/viewpre.asp?cstring=%s&tom=%d&id=%d

http://vpn.premrera.com:443/photo/%s.jpg?id=%d

http://173.254.226.212:443/viewpre.asp?cstring=%s&tom=%d&id=%d

http://173.254.226.212:443/photo/%s.jpg?id=%d

Signatures

  • Sakula family
    sakula
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2752-2-0x0000000000400000-0x000000000040B000-memory.dmp
    .exe windows:4 windows x86

    bac78d68d76cec273167912251c74570


    Headers

    Imports

    Sections