General

  • Target

    4ab2b1df61916923ea6d00c4a20e4b0faa618d4a82f264c414495e84e84d59bf

  • Size

    102KB

  • MD5

    c49b0c2d0d4a02f172d4072b7846384c

  • SHA1

    12a5a7c0475f49aa23d05abee2a06a5542be32be

  • SHA256

    4ab2b1df61916923ea6d00c4a20e4b0faa618d4a82f264c414495e84e84d59bf

  • SHA512

    282575a9aabe066c0acce636f3c622d6267bef79ff6678291b9d8d9b5aff9f4984895c11ec390471d523ffd844a8064c4ecad7983870d7b2906b0396c1147026

  • SSDEEP

    1536:jJbCiJVkgMaT2itTkjoRXnM48dXFajVPkPLnlxsz30rtrQ39e:tbfVk29te2juPLlxo30Bs39e

Score
10/10

Malware Config

Extracted

Family

sakula

C2

www.savmpet.com

Signatures

  • Sakula family
  • Sakula payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ab2b1df61916923ea6d00c4a20e4b0faa618d4a82f264c414495e84e84d59bf
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections