General

  • Target

    cf35cfc4d6ec50fbaaf7d69f08688bc132a32aff6da71a72ccf254a2b8edaf9b

  • Size

    102KB

  • MD5

    b0ca4c5df29d648be0ec9d95ad576cdf

  • SHA1

    13fcf504eed2eb69f36892adcb5c865a2519bc18

  • SHA256

    cf35cfc4d6ec50fbaaf7d69f08688bc132a32aff6da71a72ccf254a2b8edaf9b

  • SHA512

    9b5e2a4f7b59032ef298323848d4da81d5c0bbb64d12c330f2239aea6aa6df4ee439a0bf5cd70c00c0cadf47af27d511d456b4145bd6edad037d2a4a05a51825

  • SSDEEP

    1536:jJbCiJVkgMaT2itTkjoRXnM48dXFajVPkPLnlxsz30rtrQ393:tbfVk29te2juPLlxo30Bs393

Score
10/10

Malware Config

Extracted

Family

sakula

C2

www.savmpet.com

Signatures

  • Sakula family
  • Sakula payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cf35cfc4d6ec50fbaaf7d69f08688bc132a32aff6da71a72ccf254a2b8edaf9b
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections