General
-
Target
2b7044d1887a308585a8e27e0c8897c9
-
Size
80KB
-
Sample
231219-p8fbhshccr
-
MD5
2b7044d1887a308585a8e27e0c8897c9
-
SHA1
8baa4f9f57f45e81c2fb211ca8ecbd68a87ccdab
-
SHA256
f00a881478ad56594918e540141374332c15574ad4491d8475a3067db32867dd
-
SHA512
c899005c984b2b8e43b210e8eb1cb3910d7179e7080e2fec3c633ce6550eca3ca093534935b0676192f95eb39c2e3bd46dd41d5b1b179006b86d3cd3a60197cb
-
SSDEEP
1536:hoaj1hJL1S9t0MIeboal8bCKxo7h0RP0jwHVz30rtroO:S0hpgz6xGhTjwHN30BEO
Behavioral task
behavioral1
Sample
2b7044d1887a308585a8e27e0c8897c9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b7044d1887a308585a8e27e0c8897c9.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2b7044d1887a308585a8e27e0c8897c9
-
Size
80KB
-
MD5
2b7044d1887a308585a8e27e0c8897c9
-
SHA1
8baa4f9f57f45e81c2fb211ca8ecbd68a87ccdab
-
SHA256
f00a881478ad56594918e540141374332c15574ad4491d8475a3067db32867dd
-
SHA512
c899005c984b2b8e43b210e8eb1cb3910d7179e7080e2fec3c633ce6550eca3ca093534935b0676192f95eb39c2e3bd46dd41d5b1b179006b86d3cd3a60197cb
-
SSDEEP
1536:hoaj1hJL1S9t0MIeboal8bCKxo7h0RP0jwHVz30rtroO:S0hpgz6xGhTjwHN30BEO
Score10/10-
Sakula payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-