Overview

overview

10

Static

static

10

2420-1-0x0...ry.exe

windows7-x64

3

2420-1-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2420-1-0x0000000000400000-0x000000000040B000-memory.dmp

  • Size

    44KB

  • Sample

    231108-rca32abh9x

  • MD5

    9ed53b9fc28978e0022243574bd9ef90

  • SHA1

    dda728ab1dd50368ed6b6ac07ae1254cb986a2b5

  • SHA256

    a6461875dd348a27586890e78d358fa8735eb0674be58854fd87293ea05022cc

  • SHA512

    f50ff9123191dca3c3e63ec2b93c25916189f726bf0bf3d89e70cce3296bb91989ac19f0078d64c84e360dc57370f9d18b609d39764bd1e15d5dcdb99c79f419

  • SSDEEP

    384:xhnyaz2ypQY5ZkV8qvhyY3Q6oVxYCDCY3WqPakgUt11iyBrUo7MgImBH+Tk:GnHY5ZkO4hyYtoVxYhm1oUt1vnhBL

Score
10/10
sakula

Malware Config

Extracted

Family

sakula

C2

http://vpn.premrera.com:443/viewpre.asp?cstring=%s&tom=%d&id=%d

http://vpn.premrera.com:443/photo/%s.jpg?id=%d

http://173.254.226.212:443/viewpre.asp?cstring=%s&tom=%d&id=%d

http://173.254.226.212:443/photo/%s.jpg?id=%d

Targets

    • Target

      2420-1-0x0000000000400000-0x000000000040B000-memory.dmp

    • Size

      44KB

    • MD5

      9ed53b9fc28978e0022243574bd9ef90

    • SHA1

      dda728ab1dd50368ed6b6ac07ae1254cb986a2b5

    • SHA256

      a6461875dd348a27586890e78d358fa8735eb0674be58854fd87293ea05022cc

    • SHA512

      f50ff9123191dca3c3e63ec2b93c25916189f726bf0bf3d89e70cce3296bb91989ac19f0078d64c84e360dc57370f9d18b609d39764bd1e15d5dcdb99c79f419

    • SSDEEP

      384:xhnyaz2ypQY5ZkV8qvhyY3Q6oVxYCDCY3WqPakgUt11iyBrUo7MgImBH+Tk:GnHY5ZkO4hyYtoVxYhm1oUt1vnhBL

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks