General

  • Target

    entropy.exe

  • Size

    14.2MB

  • MD5

    af1ab5ff4b6616672b98ee5258de742e

  • SHA1

    5afe6e93e79dba341cbd1819620ea357aea0c081

  • SHA256

    cf700102d84659bb638a5a3e5e5a4e56a531d8bd6a963756168abba5318e868d

  • SHA512

    aa83ea46bed7ecdb370a0e7eeb49371cb502e27b8ee2f89d9cd8938aa4a695796d3eb361acf48cefcc75674ab722c2bec58d5421343a3595e5309b08a34805ae

  • SSDEEP

    196608:6WJafoL/tUoTX4ZgbX1yfvjS6tLb6qD6rhZyUvXCKxbdfw:6Wsfm/lbX1WjS6F6rhcU6KxZo

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://ptb.discord.com/api/webhooks/1256895933057208391/JAbpMTGKr8zp6Y6FOdgpyDyBziX_sUjIHgzVb28cBdxyYsUThLl6pGPEcDd4g-PbwPYr

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • entropy.exe
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections