General
-
Target
15978f016058de282291cce05e394fc7
-
Size
3.9MB
-
Sample
231219-nqz3jacfcq
-
MD5
15978f016058de282291cce05e394fc7
-
SHA1
500b3f5d840422651d20ff1189baa8f30957f1e6
-
SHA256
f5e1b3bcf04e4100a069bc84dd092d7fd7c9bb92efd8f34525651d63a5c8967a
-
SHA512
498657589d32430084a137edf3eadf70d162391f5d4dae89f7598a3cb5e56b48cefdc98d36abd014a1ca3cc75f563cb74e6dd3ccae7b79661bef60379049e2a3
-
SSDEEP
24576:j0Xx/6oTNa1h3Qh3O+ZrIb1Eu8CTPq30pYZMmjjTjuSE5DBMYL:j+5TY76HZ68kQ0paMmjjTjzeaYL
Behavioral task
behavioral1
Sample
15978f016058de282291cce05e394fc7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
15978f016058de282291cce05e394fc7.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
15978f016058de282291cce05e394fc7
-
Size
3.9MB
-
MD5
15978f016058de282291cce05e394fc7
-
SHA1
500b3f5d840422651d20ff1189baa8f30957f1e6
-
SHA256
f5e1b3bcf04e4100a069bc84dd092d7fd7c9bb92efd8f34525651d63a5c8967a
-
SHA512
498657589d32430084a137edf3eadf70d162391f5d4dae89f7598a3cb5e56b48cefdc98d36abd014a1ca3cc75f563cb74e6dd3ccae7b79661bef60379049e2a3
-
SSDEEP
24576:j0Xx/6oTNa1h3Qh3O+ZrIb1Eu8CTPq30pYZMmjjTjuSE5DBMYL:j+5TY76HZ68kQ0paMmjjTjzeaYL
Score10/10-
Sakula payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-