General
- Target d5071c7b2945ae576a8e758d3dda1f39c6b7d045aaa8a44835cd4d84652c08d4
- Size 99KB
- Sample260831-avtjnavvhv
- SHA256 d5071c7b2945ae576a8e758d3dda1f39c6b7d045aaa8a44835cd4d84652c08d4
Score
10/10
Malware Config
Targets
-
- Target d5071c7b2945ae576a8e758d3dda1f39c6b7d045aaa8a44835cd4d84652c08d4
- Size 99KB
- SHA256 d5071c7b2945ae576a8e758d3dda1f39c6b7d045aaa8a44835cd4d84652c08d4
Score10/10Family: Sakula
Sakula is a remote access trojan with various capabilities.
Sakula payload
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1