General
-
Target
NEAS.5cac1a606e13a1d16df08c202807f5f0.exe
-
Size
67KB
-
Sample
231111-ft9gdabb7v
-
MD5
5cac1a606e13a1d16df08c202807f5f0
-
SHA1
e75930c9cf14dce5125f653aa8b997eeaadf9f10
-
SHA256
6b7614ac78e4f5f0d9d3fed2d0a33796c449866555e3945b84ba36bfb435f510
-
SHA512
0caf9e64ca631cd1b2d4a68f9a2572fbe235b0288a13065aff84c9aff3d3a833406f67824e49fc05c4e5bf4514d43a16d31f01d187f1971b7fa99a290f6509b7
-
SSDEEP
768:u7Xezc/T6Zp14hyYtoVxYF9mHF1yD3BmNV8PsED3VK2+ZtyOjgO4r9vFAg2rq+:a6zqhyYtkYWI3BDYTjipvF2v
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5cac1a606e13a1d16df08c202807f5f0.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.5cac1a606e13a1d16df08c202807f5f0.exe
Resource
win10v2004-20231023-en
Malware Config
Extracted
sakula
http://www.we11point.com:443/view.asp?cookie=%s&type=%d&vid=%d
http://www.we11point.com:443/photo/%s.jpg?vid=%d
Targets
-
-
Target
NEAS.5cac1a606e13a1d16df08c202807f5f0.exe
-
Size
67KB
-
MD5
5cac1a606e13a1d16df08c202807f5f0
-
SHA1
e75930c9cf14dce5125f653aa8b997eeaadf9f10
-
SHA256
6b7614ac78e4f5f0d9d3fed2d0a33796c449866555e3945b84ba36bfb435f510
-
SHA512
0caf9e64ca631cd1b2d4a68f9a2572fbe235b0288a13065aff84c9aff3d3a833406f67824e49fc05c4e5bf4514d43a16d31f01d187f1971b7fa99a290f6509b7
-
SSDEEP
768:u7Xezc/T6Zp14hyYtoVxYF9mHF1yD3BmNV8PsED3VK2+ZtyOjgO4r9vFAg2rq+:a6zqhyYtkYWI3BDYTjipvF2v
Score10/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-