General
-
Target
2cbb6c2d3a076aa2193f20ec11b87cc5.bin
-
Size
53KB
-
MD5
96d870564805969762f7016fdf9377b1
-
SHA1
364f53f6b4abd98f3d504712df2844e1c525181c
-
SHA256
c94d6accdf2ddc30786c847d2be266a4d4ba8f0c842685f325490934f7320456
-
SHA512
40492c6995cf70185f8faab96dbf92fcd03e621ad979d9f1d6105c391061eba2bc277a144eeb47c88de22d65a7d6ac5a8975e5cca5ff163cc0174b5fa131f22a
-
SSDEEP
1536:nsaQGFwlqDTb88w95zbS7XFQkStTNFIaBhj4q9p/:nP3FwlqDTb88KbS71QkSR1BRp/
Score
10/10
Malware Config
Extracted
Family
sakula
C2
www.polarroute.com
Signatures
-
Sakula family
-
Sakula payload 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2cbb6c2d3a076aa2193f20ec11b87cc5.bin
Password: infected
-
84c00741099c035fb5059cdb3da09afdc6b64d3b6433bbaca4e4a454ccff239a.exe
Password: infected
Headers
Sections