General

  • Target

    e0f8b3a9e151135b40418e3bb57705a4.exe

  • Size

    383KB

  • MD5

    e0f8b3a9e151135b40418e3bb57705a4

  • SHA1

    5d7991804fe34820d40175c3a3468f1417dc74ec

  • SHA256

    9de8900270e6b44e11ca7c5dd4391f404cf84cba22c2c6906f2f2c34bc1828f8

  • SHA512

    e334aa92556cf997f187c1c1fe0d91eeacd332a96febbba87d011d2247f4fdddf9597282127d379a2f5057f2729b5fe13d9f6cb15815c6fcfc8c44075e0cbe0d

  • SSDEEP

    6144:l29qRFVSndj30BowBxE1+ijiBKk3etdgI2MyzNORQtOfl1qNVo7R+S+N/TU7g:dRFQnFw8EYiBlMg

Score
10/10

Malware Config

Extracted

Family

sakula

C2

www.polarroute.com

Signatures

  • Sakula family
  • Sakula payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e0f8b3a9e151135b40418e3bb57705a4.exe
    .exe windows:5 windows x86 arch:x86

    4511896d043677e4ab4578dc5bcab5a0


    Headers

    Imports

    Sections