General

  • Target

    SolaraB-FAKE.zip

  • Size

    4.1MB

  • MD5

    1ef831f80699806bcf409154fffca79c

  • SHA1

    1f7152965bd0720f7f6bc4471011fa5fce6cde88

  • SHA256

    345f5b075dc43df24634cb3168ea1cc81f2338ff0ad064c32c53030088ad3202

  • SHA512

    66569973be704036d801f10b898b4d77522e1c09dda48cc1697b89befb18564abcdc27a81384c6af80d7aed004e3dcb6e55e7c7802dcb0dfbebc352ce134b135

  • SSDEEP

    98304:T7X+kovxnx2RWLtU+RE9iiF92FUCM/JmXzLahTt7T90KKATOVd:TdcoWL2+RE0G92FFR8CKKATOVd

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1253112821869445170/mrbfEJTpSvfpjbbvCVeYAiI0KbjjcCUTKgpRyRHniWbHDTS44OWIj4mT-_XnWPFVYi9F

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SolaraB-FAKE.zip
    .zip
  • SolaraBootstrapper.exe
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections