Overview

overview

10

Static

static

10

f4c98e6c7d...f8.exe

windows7-x64

10

f4c98e6c7d...f8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f4c98e6c7ddbe488f9aab80049950852fe0ff9a3beb8d1675df2eda5019f1ef8

  • Size

    367KB

  • MD5

    49f3d749b5cf210b56f5ad7879b526ba

  • SHA1

    674bf8e746881104de3a8c18351e62b2a03f0aab

  • SHA256

    f4c98e6c7ddbe488f9aab80049950852fe0ff9a3beb8d1675df2eda5019f1ef8

  • SHA512

    fd3baf32d753fe81606bad66a9b87f8fdf6a2bf7a35aca583ec3c31516d4e8c6f15e7cff0e72f583d3cf764d2d7464d1bed0bac34ea4ac0909de709de923892c

  • SSDEEP

    6144:l29qRaVSsdj30BzwBxE1+ijiBKk3etdgI2MyzNORQtOfl1qNVo7R+S+N/TU76:dRaQsOw8EYiBlM6

Score
10/10
sakula

Malware Config

Extracted

Family

sakula

C2

www.polarroute.com

Signatures

  • Sakula family
    sakula
  • Sakula payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f4c98e6c7ddbe488f9aab80049950852fe0ff9a3beb8d1675df2eda5019f1ef8
    .exe windows:5 windows x86 arch:x86

    4511896d043677e4ab4578dc5bcab5a0


    Headers

    Imports

    Sections