Extracted

• • Target

    NEAS.9a34b739c35e37e7bffa7e46b73a0b50.exe

  • Size

    40KB

  • MD5

    9a34b739c35e37e7bffa7e46b73a0b50

  • SHA1

    c0d7c30c0a973a501ef3365032607828a80ae2aa

  • SHA256

    26fc1f02e0b88017b99d811342a5b00753a944832fcf94b2a08b59065eeaa590

  • SHA512

    dcbb30236d5c4f76f124ac41507e51d5de37773f3a5b91223f6eba62015aba0b7305cfe6d875606d3ea3e10bebe7850c7b003873e95a6c973ab65c6362625b83

  • SSDEEP

    768:q7Xezc/T6Zp14hyYtoVxYF9mHfCBJTAIO3OtYVo:G6zqhyYtkYW/CPnO3A

  Score

  10^/10

  sakulapersistencerattrojan

  • Sakula

    Sakula is a remote access trojan with various capabilities.

    trojanratsakula

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2