Overview

overview

10

Static

static

10

skuld.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    skuld.exe

  • Size

    9.5MB

  • Sample

    240630-gs1nhsthpa

  • MD5

    da4bf124529b32d5daff341cba7b746c

  • SHA1

    7297b55ceff76cdec32e722902ae61524d4b7442

  • SHA256

    c58b34b4af808fefeaf1545f4f3c0375a32cdb9a6e6c95c4d0cf50ea601aad3e

  • SHA512

    7a04a1f68045c7b91f5df3e12c155543f4934678d764bbd5c8db78e33dc13ae4885bcdcc7f2af4ab8f2417633090286a0263143f5992470e4416eaee3a2d194a

  • SSDEEP

    98304:0l+jC6y/CQ8VtNqvV0FIS3fT4mEJJkF88l19bf3:ZDy/ChS0FIS3r4DJC19f

Score
10/10
skuldpersistencestealer

Malware Config

Targets

    • Target

      skuld.exe

    • Size

      9.5MB

    • MD5

      da4bf124529b32d5daff341cba7b746c

    • SHA1

      7297b55ceff76cdec32e722902ae61524d4b7442

    • SHA256

      c58b34b4af808fefeaf1545f4f3c0375a32cdb9a6e6c95c4d0cf50ea601aad3e

    • SHA512

      7a04a1f68045c7b91f5df3e12c155543f4934678d764bbd5c8db78e33dc13ae4885bcdcc7f2af4ab8f2417633090286a0263143f5992470e4416eaee3a2d194a

    • SSDEEP

      98304:0l+jC6y/CQ8VtNqvV0FIS3fT4mEJJkF88l19bf3:ZDy/ChS0FIS3r4DJC19f

    Score
    10/10
    skuldpersistencestealer

    • Skuld stealer

      An info stealer written in Go lang.

      stealerskuld

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks