General
- Target 8c9d0deb4f6eb12673769e65742fdc79ddc3618ec92d20c64f8b52f109f9430a.exe
- Size 35KB
- Sample260531-j9rhaacz7x
- SHA256 8c9d0deb4f6eb12673769e65742fdc79ddc3618ec92d20c64f8b52f109f9430a
Score
10/10
Malware Config
Targets
-
- Target 8c9d0deb4f6eb12673769e65742fdc79ddc3618ec92d20c64f8b52f109f9430a.exe
- Size 35KB
- SHA256 8c9d0deb4f6eb12673769e65742fdc79ddc3618ec92d20c64f8b52f109f9430a
Score10/10Family: Sakula
Sakula is a remote access trojan with various capabilities.
Sakula payload
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1