General
-
Target
d24231c7fd3434c343289eefe8d9e561.bin
-
Size
16KB
-
Sample
231110-dgtt2sab9v
-
MD5
4d3b85a96969392470abf00e15830078
-
SHA1
f56e741b516afef4174aa32604f2fdbfa4ba7f44
-
SHA256
db56a4f3a0605346af53e8363c8ab84c08d7d8d555ad1aae2636cbd291e51172
-
SHA512
53482920e14f0f3048fdf7737a29773af6bcd787307935db6d5fb98743fbf8b93c9a85b27b9dad8c7ab08610d0a88763cb365669a6e45cc4b5514a2b22e980e4
-
SSDEEP
384:+bsHmw5YeEb3GPiMrf6xqYb+suHgRxPBRLGcSucpRQVF:+oh5YlfMeUYb+suAnPfLRiRQVF
Static task
static1
Behavioral task
behavioral1
Sample
6de45d12ecbb43adb995681c0fa32fef9aeeebc3b645105ce9d0d94a9781fdc8.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
6de45d12ecbb43adb995681c0fa32fef9aeeebc3b645105ce9d0d94a9781fdc8.exe
Resource
win10v2004-20231023-en
Malware Config
Extracted
sakula
http://vpn.premrera.com:443/viewpre.asp?cstring=%s&tom=%d&id=%d
http://vpn.premrera.com:443/photo/%s.jpg?id=%d
http://173.254.226.212:443/viewpre.asp?cstring=%s&tom=%d&id=%d
http://173.254.226.212:443/photo/%s.jpg?id=%d
Targets
-
-
Target
6de45d12ecbb43adb995681c0fa32fef9aeeebc3b645105ce9d0d94a9781fdc8.exe
-
Size
44KB
-
MD5
d24231c7fd3434c343289eefe8d9e561
-
SHA1
9b554dedf014e6518796d657fae6c9786a6c9a27
-
SHA256
6de45d12ecbb43adb995681c0fa32fef9aeeebc3b645105ce9d0d94a9781fdc8
-
SHA512
071668c29357e18d441d6136b4461bb52337ea65f67381728271445604b9d0bd870b86807157f5f1e1e0d63c7ff33fe61608957828459290d8e6836bc7d8529c
-
SSDEEP
768:GhSksandb4GgyMsw4hyYtoVxYMcm1oUt1vnhBl:GTsGpjhyYtkYMRyUFb
Score10/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-