Overview

overview

10

Static

static

3

3d0e6f2e3c...0f.exe

windows7-x64

10

3d0e6f2e3c...0f.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3d0e6f2e3c3ca3b3c0a0893a6505d90f

  • Size

    35KB

  • Sample

    231219-rc3haadde3

  • MD5

    3d0e6f2e3c3ca3b3c0a0893a6505d90f

  • SHA1

    b2662528e4d5e5a0a3e0c7ce61412e270ce955a6

  • SHA256

    b73638f66430823825ff308d86a73613fbddbd82605178a67d3ff212794b1e55

  • SHA512

    701ab64ba9b8fcd7005433064eaa84853c23ac63f1ebe8363fddfd0c501dc675e25489f2d7ffd2cebf4c2ac6d30e8259014e71ebb83d645da200752caca8aeb1

  • SSDEEP

    768:lwbYGCv4nuEcJpQK4TQbtKvXwXgA9lJJea+yGCJQqeWnAEv2647Dq:lwbYP4nuEApQK4TQbtY2gA9DX+ytBO8

Score
10/10
sakulapersistencerattrojan

Malware Config

Targets

    • Target

      3d0e6f2e3c3ca3b3c0a0893a6505d90f

    • Size

      35KB

    • MD5

      3d0e6f2e3c3ca3b3c0a0893a6505d90f

    • SHA1

      b2662528e4d5e5a0a3e0c7ce61412e270ce955a6

    • SHA256

      b73638f66430823825ff308d86a73613fbddbd82605178a67d3ff212794b1e55

    • SHA512

      701ab64ba9b8fcd7005433064eaa84853c23ac63f1ebe8363fddfd0c501dc675e25489f2d7ffd2cebf4c2ac6d30e8259014e71ebb83d645da200752caca8aeb1

    • SSDEEP

      768:lwbYGCv4nuEcJpQK4TQbtKvXwXgA9lJJea+yGCJQqeWnAEv2647Dq:lwbYP4nuEApQK4TQbtY2gA9DX+ytBO8

    Score
    10/10
    sakulapersistencerattrojan

    • Sakula

      Sakula is a remote access trojan with various capabilities.

      trojanratsakula

    • Sakula payload

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks