General
-
Target
2276aea8ae5d09e18e2f1315d282bc1592f782da96a5b6f769f0eb1dd13c5f0bN
-
Size
114KB
-
Sample
250113-r12kwsvrfw
-
MD5
8d04f3fbbfeda8802347c45cd82c49d0
-
SHA1
e26409fdfd67d4d961741ae505ed18b7a14e7733
-
SHA256
2276aea8ae5d09e18e2f1315d282bc1592f782da96a5b6f769f0eb1dd13c5f0b
-
SHA512
c7cc2afbfe5e82d5b26073d30c9bcfabab295040275431623f61f792996aa8a57c577ebd6b510276f0120e04f5f004306ff476353f294c3c23153ea52a304ff7
-
SSDEEP
1536:Loaj1hJL1S9t0MIeboal8bCKxo7h0RPLJNz30rtriCr0nJnHPoq1nouy8uRgs:c0hpgz6xGhYJF30Blr0nhoutuRgs
Behavioral task
behavioral1
Sample
2276aea8ae5d09e18e2f1315d282bc1592f782da96a5b6f769f0eb1dd13c5f0bN.exe
Resource
win7-20241023-en
Malware Config
Targets
-
-
Target
2276aea8ae5d09e18e2f1315d282bc1592f782da96a5b6f769f0eb1dd13c5f0bN
-
Size
114KB
-
MD5
8d04f3fbbfeda8802347c45cd82c49d0
-
SHA1
e26409fdfd67d4d961741ae505ed18b7a14e7733
-
SHA256
2276aea8ae5d09e18e2f1315d282bc1592f782da96a5b6f769f0eb1dd13c5f0b
-
SHA512
c7cc2afbfe5e82d5b26073d30c9bcfabab295040275431623f61f792996aa8a57c577ebd6b510276f0120e04f5f004306ff476353f294c3c23153ea52a304ff7
-
SSDEEP
1536:Loaj1hJL1S9t0MIeboal8bCKxo7h0RPLJNz30rtriCr0nJnHPoq1nouy8uRgs:c0hpgz6xGhYJF30Blr0nhoutuRgs
-
Sakula family
-
Sakula payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1