General

  • Target

    a45eea38cabafc5df05ee79751b437ffaf86c7a91ffb0e622626d05355f3dfcf.exe

  • Size

    89KB

  • Sample

    250117-k5e45a1lbk

  • MD5

    09040f0f0c5bd96267083a1ffaee56d5

  • SHA1

    9068dc8639e54e2b665116015eefc3816c345a2b

  • SHA256

    a45eea38cabafc5df05ee79751b437ffaf86c7a91ffb0e622626d05355f3dfcf

  • SHA512

    97e08e4e0ad94b0644ec16bb24b60ffff6ece4ba94b29a998204caf0fed73ed062148b7f41b927e19965de4a5d68df51b9f847409354a32f977d6d4ca5310944

  • SSDEEP

    1536:xQFl29mEkE0L1rDEKrxZKF2zf9g2Pl7W/MwbxMX+fes5Lz30rtrQ:q29DkEGRQixVSjLTes5330BM

Malware Config

Extracted

Family

sakula

C2

www.polarroute.com

Targets

    • Target

      a45eea38cabafc5df05ee79751b437ffaf86c7a91ffb0e622626d05355f3dfcf.exe

    • Size

      89KB

    • MD5

      09040f0f0c5bd96267083a1ffaee56d5

    • SHA1

      9068dc8639e54e2b665116015eefc3816c345a2b

    • SHA256

      a45eea38cabafc5df05ee79751b437ffaf86c7a91ffb0e622626d05355f3dfcf

    • SHA512

      97e08e4e0ad94b0644ec16bb24b60ffff6ece4ba94b29a998204caf0fed73ed062148b7f41b927e19965de4a5d68df51b9f847409354a32f977d6d4ca5310944

    • SSDEEP

      1536:xQFl29mEkE0L1rDEKrxZKF2zf9g2Pl7W/MwbxMX+fes5Lz30rtrQ:q29DkEGRQixVSjLTes5330BM

    • Sakula

      Sakula is a remote access trojan with various capabilities.

    • Sakula family

    • Sakula payload

MITRE ATT&CK Enterprise v15

Tasks