General
-
Target
2312900294b883daeb6d3b617afe2f97e9b920fb2e0f604b4b3c53cbc54c9b26
-
Size
100KB
-
Sample
240408-x429gshf24
-
MD5
0635b48b4b46250f1c9ddf3f426f3cab
-
SHA1
03e2706dda83ea35edd57cbfd8f0b389b734cc53
-
SHA256
2312900294b883daeb6d3b617afe2f97e9b920fb2e0f604b4b3c53cbc54c9b26
-
SHA512
43d37090974913d1769d7a75a3cb544e2567a12bd4f09c61ac2a3aa4d6f8898b14e912770e5b36e47c82a65b0660d0ac7f502e26e5d8c76bd54410bce093f16a
-
SSDEEP
1536:Zoaj1hJL1S9t0MIeboal8bCKxo7h0RPaaml0Nz30rtrJxl:K0hpgz6xGhZamyF30BNxl
Behavioral task
behavioral1
Sample
2312900294b883daeb6d3b617afe2f97e9b920fb2e0f604b4b3c53cbc54c9b26.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2312900294b883daeb6d3b617afe2f97e9b920fb2e0f604b4b3c53cbc54c9b26.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2312900294b883daeb6d3b617afe2f97e9b920fb2e0f604b4b3c53cbc54c9b26
-
Size
100KB
-
MD5
0635b48b4b46250f1c9ddf3f426f3cab
-
SHA1
03e2706dda83ea35edd57cbfd8f0b389b734cc53
-
SHA256
2312900294b883daeb6d3b617afe2f97e9b920fb2e0f604b4b3c53cbc54c9b26
-
SHA512
43d37090974913d1769d7a75a3cb544e2567a12bd4f09c61ac2a3aa4d6f8898b14e912770e5b36e47c82a65b0660d0ac7f502e26e5d8c76bd54410bce093f16a
-
SSDEEP
1536:Zoaj1hJL1S9t0MIeboal8bCKxo7h0RPaaml0Nz30rtrJxl:K0hpgz6xGhZamyF30BNxl
Score10/10-
Sakula payload
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-