Overview

overview

10

Static

static

10

2770111e9c...d0.exe

windows7-x64

10

2770111e9c...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e092b58c6215f860f0255f3fb5f2f83.zip

  • Size

    81KB

  • MD5

    f581fbd4a20a5d856c80274addf02aa7

  • SHA1

    2115a49fda72486449c789392ccd659a25449e56

  • SHA256

    b60230724828e538d1162781e31b0ddb1d4baca69358e7ec09d6281e82d5fa61

  • SHA512

    d80d71ed3e99dbebd21baafc0ea70c1f0904e61e132a834e4f834e7ecf5c130390d0d45c8c6ef0ef09f4795427dae7e055aa226c3219b130ca07d47c4e0eb898

  • SSDEEP

    1536:XBvMsC1swxoRAOIu7QvMAlcS3640sEK63S1mvJ5nvfa2SugXpTlIaLQXPMEwmp:X1HXAkcK4gSktSughGj/1tp

Score
10/10
sakula

Malware Config

Extracted

Family

sakula

C2

www.polarroute.com

Signatures

  • Sakula family
    sakula
  • Sakula payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6e092b58c6215f860f0255f3fb5f2f83.zip
    .zip

    Password: infected

  • 2770111e9c78bdad80466d60982f0d3f576e051dc8c566d504a1c59cce0a33d0
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections