General
- Target b20b52d4a7f28e0d7a14cb42985001a5185e237fb9c960b92b462d5ce435bf80.exe
- Size 99KB
- Sample260507-caf4yahw5m
- SHA256 b20b52d4a7f28e0d7a14cb42985001a5185e237fb9c960b92b462d5ce435bf80
Score
10/10
Malware Config
Targets
-
- Target b20b52d4a7f28e0d7a14cb42985001a5185e237fb9c960b92b462d5ce435bf80.exe
- Size 99KB
- SHA256 b20b52d4a7f28e0d7a14cb42985001a5185e237fb9c960b92b462d5ce435bf80
Score10/10Family: Sakula
Sakula is a remote access trojan with various capabilities.
Sakula payload
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1