Resubmissions

24-08-2023 06:12

230824-gyggtsae64 10

27-05-2023 16:10

230527-tmmwpacg8v 3

General

  • Target

    b8ea26cc228123ecb77b46d325f0ec34dd5c9b37e3e4ec492a4bf51840218025.zip

  • Size

    4.4MB

  • MD5

    0c58269601cdfb9dfc7c211f899748ea

  • SHA1

    af2f28cffef421ba773cf7aa8dcdd8a998eac84b

  • SHA256

    ce6a2a05fc9236f9d784344198256451dbe5f91a1350d397ef0e64784cacae13

  • SHA512

    af880583da3bf80a23098fc46f12c8345ae6bfcd3745615883ee567e3b7e6034245ea214636c001216f42dcddd3674fd55a904651b6c413213ce0234daee9958

  • SSDEEP

    98304:FiLACp34ix4JDZLePSojDb9GxAMWLuiybmrWoDPH/mv6aLzKyR/:EF4CUBeaoj9LkdQ/eSg/

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1101151106052145214/BIaHrwzWkurP1ifNTfI0S-nV_adpU3L7CtHkZgsoxNh0xWIhQpjX2fdzD9kB7BDNYQi7

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b8ea26cc228123ecb77b46d325f0ec34dd5c9b37e3e4ec492a4bf51840218025.zip
    .zip

    Password: infected

  • b8ea26cc228123ecb77b46d325f0ec34dd5c9b37e3e4ec492a4bf51840218025
    .exe windows x64

    Password: infected

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Headers

    Imports

    Sections