Extracted

• • Target

    skuld.exe

  • Size

    9.5MB

  • MD5

    0f4ab4d8d417e5a6de7a3bee48bf9bf5

  • SHA1

    6facdd19f68318f1a921eeaaec5357dbc83d1f09

  • SHA256

    0d0cae8bd18fa3651c20c36eef95c57b9c628b8f8f34ccd815b353e38629ef1d

  • SHA512

    a59f1357ed58ec31ce39b4d8cfdb87a465ed0841548679d5243ad3c9dbe69657ef5afea0f3187343c6ad3919219b48d5043e715ab52190dbffed52ff6770041e

  • SSDEEP

    98304:bq+hSe9c0IA4WZCWdeU22wr64EElpEkF8P6COf6:bzlW0/rgU22wm49lpS6COf6

  Score

  10^/10

  skuldpersistencestealer

  • Skuld stealer

    An info stealer written in Go lang.

    stealerskuld

  • Adds Run key to start application

    persistence

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1