General
-
Target
45d89ec308ca69ab82df464b7166f53aed8be43f3702c65a711bcf72bb72974f
-
Size
44KB
-
Sample
231108-qvwl1sdb93
-
MD5
0cb69e72b4b060af02339b16f618dc71
-
SHA1
76777d0f7bea903e8ee4875d92bfc9fe4fcf665b
-
SHA256
45d89ec308ca69ab82df464b7166f53aed8be43f3702c65a711bcf72bb72974f
-
SHA512
c55fa00e56232347bd0efe9bfee59e933942b4947d52a77c1fdda1aecb50bb2a77ec7576c7d6fa356b7a4f5c5fa492a790af5a831dc943add866c8c98b87f930
-
SSDEEP
768:GhSksandb4GgyMsw4hyYtoVxYMcm1oUt1vnhBa:GTsGpjhyYtkYMRyUFM
Static task
static1
Behavioral task
behavioral1
Sample
45d89ec308ca69ab82df464b7166f53aed8be43f3702c65a711bcf72bb72974f.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
45d89ec308ca69ab82df464b7166f53aed8be43f3702c65a711bcf72bb72974f.exe
Resource
win10v2004-20231023-en
Malware Config
Extracted
sakula
http://vpn.premrera.com:443/viewpre.asp?cstring=%s&tom=%d&id=%d
http://vpn.premrera.com:443/photo/%s.jpg?id=%d
http://173.254.226.212:443/viewpre.asp?cstring=%s&tom=%d&id=%d
http://173.254.226.212:443/photo/%s.jpg?id=%d
Targets
-
-
Target
45d89ec308ca69ab82df464b7166f53aed8be43f3702c65a711bcf72bb72974f
-
Size
44KB
-
MD5
0cb69e72b4b060af02339b16f618dc71
-
SHA1
76777d0f7bea903e8ee4875d92bfc9fe4fcf665b
-
SHA256
45d89ec308ca69ab82df464b7166f53aed8be43f3702c65a711bcf72bb72974f
-
SHA512
c55fa00e56232347bd0efe9bfee59e933942b4947d52a77c1fdda1aecb50bb2a77ec7576c7d6fa356b7a4f5c5fa492a790af5a831dc943add866c8c98b87f930
-
SSDEEP
768:GhSksandb4GgyMsw4hyYtoVxYMcm1oUt1vnhBa:GTsGpjhyYtkYMRyUFM
Score10/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-