General
-
Target
30061268063116f854b0d852633da766
-
Size
35KB
-
Sample
231219-qh7hracacj
-
MD5
30061268063116f854b0d852633da766
-
SHA1
b884240ccdca0945936936d5bdbb5e9c1be5644a
-
SHA256
6cf59fb86fb64ec86d78df143339d3c2c6e35eef58d3b256bc727075e5d59389
-
SHA512
763c99c80a65920d1742cbcc8f32e815d34dfcdaa35d1a17fd2746a53d172206f01bd7560d23e7e52b370353c2d277892161574b69ded0f5244be5e0f1f11289
-
SSDEEP
768:lwbYGCv4nuEcJpQK4TQbtKvXwXgA9lJJea+yGCJQqeWnAEv2647D7:lwbYP4nuEApQK4TQbtY2gA9DX+ytBOF
Static task
static1
Behavioral task
behavioral1
Sample
30061268063116f854b0d852633da766.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
30061268063116f854b0d852633da766.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
30061268063116f854b0d852633da766
-
Size
35KB
-
MD5
30061268063116f854b0d852633da766
-
SHA1
b884240ccdca0945936936d5bdbb5e9c1be5644a
-
SHA256
6cf59fb86fb64ec86d78df143339d3c2c6e35eef58d3b256bc727075e5d59389
-
SHA512
763c99c80a65920d1742cbcc8f32e815d34dfcdaa35d1a17fd2746a53d172206f01bd7560d23e7e52b370353c2d277892161574b69ded0f5244be5e0f1f11289
-
SSDEEP
768:lwbYGCv4nuEcJpQK4TQbtKvXwXgA9lJJea+yGCJQqeWnAEv2647D7:lwbYP4nuEApQK4TQbtY2gA9DX+ytBOF
Score10/10-
Sakula payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-