sakula | b291ab0d1e050160de6fdaa51f4a035643d4d0369f4fb97b5381f6f31e7bb2a4 | Triage

Sharing

General

Target

b291ab0d1e050160de6fdaa51f4a035643d4d0369f4fb97b5381f6f31e7bb2a4.exe
Size

79KB
Sample

241218-k75gssspfy
MD5

c4d7d8ff85085fddca88cb3af5393f8a
SHA1

7490c6f58db6b79374d7b57f9ff89cd26cf04701
SHA256

b291ab0d1e050160de6fdaa51f4a035643d4d0369f4fb97b5381f6f31e7bb2a4
SHA512

04705d71aefad8f382c7bc9e1c384121f2a7a7d16ac78a1ddc54152fc7a4a2061fc7df71181e0ab1b94fd00d992f2ad083ebb03671d3b276d5a76465164f6726
SSDEEP

1536:1oaj1hJL1S9t0MIeboal8bCKxo7h0RP0jwHVz30rtro2:W0hpgz6xGhTjwHN30BE2

Score

10^/10

sakula discovery persistence rat trojan

Malware Config

Targets

- Target
  
  b291ab0d1e050160de6fdaa51f4a035643d4d0369f4fb97b5381f6f31e7bb2a4.exe
- Size
  
  79KB
- MD5
  
  c4d7d8ff85085fddca88cb3af5393f8a
- SHA1
  
  7490c6f58db6b79374d7b57f9ff89cd26cf04701
- SHA256
  
  b291ab0d1e050160de6fdaa51f4a035643d4d0369f4fb97b5381f6f31e7bb2a4
- SHA512
  
  04705d71aefad8f382c7bc9e1c384121f2a7a7d16ac78a1ddc54152fc7a4a2061fc7df71181e0ab1b94fd00d992f2ad083ebb03671d3b276d5a76465164f6726
- SSDEEP
  
  1536:1oaj1hJL1S9t0MIeboal8bCKxo7h0RP0jwHVz30rtro2:W0hpgz6xGhTjwHN30BE2
Score

10^/10

sakula discovery persistence rat trojan
- Sakula
  Sakula is a remote access trojan with various capabilities.
  trojan rat sakula
- Sakula family
  sakula
- Sakula payload
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

sakuladiscoverypersistencerattrojan

behavioral2

sakuladiscoverypersistencerattrojan