Overview

overview

10

Static

static

10

38121d9807...2N.exe

windows7-x64

10

38121d9807...2N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    38121d9807f873d6721e99d31c03d78795745d82eb7198b1914bb8ad14cde7b2N.exe

  • Size

    488KB

  • MD5

    c7eb9cb21122507077ab4a5ab2679840

  • SHA1

    7540f3ccdb65a56e20bf4558d5b67cfb17655780

  • SHA256

    38121d9807f873d6721e99d31c03d78795745d82eb7198b1914bb8ad14cde7b2

  • SHA512

    fe4e7b64579e7de2879c90b7133300f31cad0fbbe208262d55f73792614f905886adbfa631a203f4e98041620c4f887d8c8e315532b88077154dce73faa66801

  • SSDEEP

    6144:M29qRfVSndj30B3wBxE1+ijiBKk3etdgI2MyzNORQtOfl1qNVo7R+S+N/TU7kn56:0RfQn+w8EYiBlMkn5f9J105ko8T6csVN

Score
10/10
sakula

Malware Config

Extracted

Family

sakula

C2

www.polarroute.com

Signatures

  • Sakula family
    sakula
  • Sakula payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 38121d9807f873d6721e99d31c03d78795745d82eb7198b1914bb8ad14cde7b2N.exe
    .exe windows:5 windows x86 arch:x86

    4511896d043677e4ab4578dc5bcab5a0


    Headers

    Imports

    Sections