Overview

overview

10

Static

static

10

a45eea38ca...cf.exe

windows7-x64

10

a45eea38ca...cf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a45eea38cabafc5df05ee79751b437ffaf86c7a91ffb0e622626d05355f3dfcf

  • Size

    89KB

  • MD5

    09040f0f0c5bd96267083a1ffaee56d5

  • SHA1

    9068dc8639e54e2b665116015eefc3816c345a2b

  • SHA256

    a45eea38cabafc5df05ee79751b437ffaf86c7a91ffb0e622626d05355f3dfcf

  • SHA512

    97e08e4e0ad94b0644ec16bb24b60ffff6ece4ba94b29a998204caf0fed73ed062148b7f41b927e19965de4a5d68df51b9f847409354a32f977d6d4ca5310944

  • SSDEEP

    1536:xQFl29mEkE0L1rDEKrxZKF2zf9g2Pl7W/MwbxMX+fes5Lz30rtrQ:q29DkEGRQixVSjLTes5330BM

Score
10/10
sakula

Malware Config

Extracted

Family

sakula

C2

www.polarroute.com

Signatures

  • Sakula family
    sakula
  • Sakula payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a45eea38cabafc5df05ee79751b437ffaf86c7a91ffb0e622626d05355f3dfcf
    .exe windows:5 windows x86 arch:x86

    4511896d043677e4ab4578dc5bcab5a0


    Headers

    Imports

    Sections