General

  • Target
    6e092b58c6215f860f0255f3fb5f2f83.zip
  • Size 81KB
  • Sample240903-wheevssejp
  • SHA256 b60230724828e538d1162781e31b0ddb1d4baca69358e7ec09d6281e82d5fa61
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • sakula

C2
  • www.polarroute.com

Signatures

  • Sakula family
  • Sakula payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 6e092b58c6215f860f0255f3fb5f2f83.zip
    .zip 81KB
  • 2770111e9c78bdad80466d60982f0d3f576e051dc8c566d504a1c59cce0a33d0
    .exe 150KB

6e092b58c6215f860f0255f3fb5f2f83.zip

  • SHA256 b60230724828e538d1162781e31b0ddb1d4baca69358e7ec09d6281e82d5fa61
  • MD5 SHA1 SHA512 SSDEEP
Password
infected