sakula | ebd58a7038ba78af5aa4fce5ac9155e9c63e92be58e488ed44587dab0933943a | Triage

Sharing

General

Target

ebd58a7038ba78af5aa4fce5ac9155e9c63e92be58e488ed44587dab0933943a
Size

3.6MB
Sample

240908-rlb2pasgja
MD5

9538bd2939d7d44a8a5a91fc7d1f0068
SHA1

de3122bf77361ead4ad752042f3f4e357cdaf28f
SHA256

ebd58a7038ba78af5aa4fce5ac9155e9c63e92be58e488ed44587dab0933943a
SHA512

69985e9c14e77e500c3caba649077ee6d4d8a812c28e27ffab052d264df0a67e447945031dc3f0633a30990370e3375f4110e63e957f1c2d2f05ab1b0ab17d2c
SSDEEP

49152:w852ZjeUNZZH46HsnHVT5ZA+acdD6xXTI:wU6eUNZZJHsH

Score

10^/10

sakula discovery

Malware Config

Extracted

Family

sakula

C2

www.polarroute.com

Targets

- Target
  
  ebd58a7038ba78af5aa4fce5ac9155e9c63e92be58e488ed44587dab0933943a
- Size
  
  3.6MB
- MD5
  
  9538bd2939d7d44a8a5a91fc7d1f0068
- SHA1
  
  de3122bf77361ead4ad752042f3f4e357cdaf28f
- SHA256
  
  ebd58a7038ba78af5aa4fce5ac9155e9c63e92be58e488ed44587dab0933943a
- SHA512
  
  69985e9c14e77e500c3caba649077ee6d4d8a812c28e27ffab052d264df0a67e447945031dc3f0633a30990370e3375f4110e63e957f1c2d2f05ab1b0ab17d2c
- SSDEEP
  
  49152:w852ZjeUNZZH46HsnHVT5ZA+acdD6xXTI:wU6eUNZZJHsH
Score

3^/10

discovery
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1