General
-
Target
2362b264328a17b4d72a61f2a6fdfd2319d6ed1c03b6a7c6a0bfbc99792b2a94
-
Size
43KB
-
Sample
240408-x5s27sch2y
-
MD5
cf34e1b595a7a509b042f7686657ea99
-
SHA1
e0a736ab88bb226d3b909ad8707c792b58640f09
-
SHA256
2362b264328a17b4d72a61f2a6fdfd2319d6ed1c03b6a7c6a0bfbc99792b2a94
-
SHA512
2cedff36a719246a0989b0ee81e680af8a7280e3a98497e70fc5cc2c23b4de13d06cb6f3fe9ab95b87a2b6b1ba1d57d8e3d94f045ab828c2b1bcf1113db47eb0
-
SSDEEP
768:FUiX34HOc2Lsh7mfUolW/xtNEM5iZhcOL0tTChQEgHDRl:VYE4Z4lsjNbtNEql
Behavioral task
behavioral1
Sample
2362b264328a17b4d72a61f2a6fdfd2319d6ed1c03b6a7c6a0bfbc99792b2a94.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2362b264328a17b4d72a61f2a6fdfd2319d6ed1c03b6a7c6a0bfbc99792b2a94.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2362b264328a17b4d72a61f2a6fdfd2319d6ed1c03b6a7c6a0bfbc99792b2a94
-
Size
43KB
-
MD5
cf34e1b595a7a509b042f7686657ea99
-
SHA1
e0a736ab88bb226d3b909ad8707c792b58640f09
-
SHA256
2362b264328a17b4d72a61f2a6fdfd2319d6ed1c03b6a7c6a0bfbc99792b2a94
-
SHA512
2cedff36a719246a0989b0ee81e680af8a7280e3a98497e70fc5cc2c23b4de13d06cb6f3fe9ab95b87a2b6b1ba1d57d8e3d94f045ab828c2b1bcf1113db47eb0
-
SSDEEP
768:FUiX34HOc2Lsh7mfUolW/xtNEM5iZhcOL0tTChQEgHDRl:VYE4Z4lsjNbtNEql
Score10/10-
Sakula payload
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-