General

  • Target

    5540be2ef9937735cbcfeac74728faee3eb30bd4f5441df4df3cff8d19dd6b8d.exe

  • Size

    912KB

  • MD5

    b4cfa21f7e89d8297393c1a8f4d5419f

  • SHA1

    260d9b253c7808d81cc2990132fb81adc0aba81a

  • SHA256

    5540be2ef9937735cbcfeac74728faee3eb30bd4f5441df4df3cff8d19dd6b8d

  • SHA512

    dcb6b9876597663aeea1a60ef1f9e928ca604a1550069958649dcd2b38e6ce610585e93cc87246dfbb18ab06893f0ba09df06a53841bfed878966ef8ff3b4bdb

  • SSDEEP

    12288:0RfQn+w8EYiBlMkn5f9J105ko8T6csV5f1bYQog9hVn454E4CiW:g4+wlYBsb3zNs5f1bYInVn454EgW

Score
10/10

Malware Config

Extracted

Family

sakula

C2

www.polarroute.com

Signatures

  • Sakula family
  • Sakula payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5540be2ef9937735cbcfeac74728faee3eb30bd4f5441df4df3cff8d19dd6b8d.exe
    .exe windows:5 windows x86 arch:x86

    4511896d043677e4ab4578dc5bcab5a0


    Headers

    Imports

    Sections