Overview

overview

10

Static

static

10

skuld.exe

windows7-x64

1

skuld.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    skuld.exe

  • Size

    9.5MB

  • Sample

    240630-lmr7eawbmf

  • MD5

    79ff221ab5f4ec73e3cf2603de02dd3c

  • SHA1

    d03cd4bd46d07692b2cb2aa70032b2f7cf8f6614

  • SHA256

    b2389efe45f191978aeea0b38f35e967e812583644512e1d721b7adb88719008

  • SHA512

    04bdae4d323d1bc9446778e1ee66aaf1e3249e40de6dc8406eac9138e1b1b87ee00faf5a6cc41aeeb8b816c7b96a3d6bec442470f7c884318b91f2baa36f64a9

  • SSDEEP

    98304:e03AgTj/aqro8jCvVwPIieO7XFEDT7kF8+l19Qfz:vlj/apjwPIiemX2DTW1if

Score
10/10
skuldpersistencestealer

Malware Config

Targets

    • Target

      skuld.exe

    • Size

      9.5MB

    • MD5

      79ff221ab5f4ec73e3cf2603de02dd3c

    • SHA1

      d03cd4bd46d07692b2cb2aa70032b2f7cf8f6614

    • SHA256

      b2389efe45f191978aeea0b38f35e967e812583644512e1d721b7adb88719008

    • SHA512

      04bdae4d323d1bc9446778e1ee66aaf1e3249e40de6dc8406eac9138e1b1b87ee00faf5a6cc41aeeb8b816c7b96a3d6bec442470f7c884318b91f2baa36f64a9

    • SSDEEP

      98304:e03AgTj/aqro8jCvVwPIieO7XFEDT7kF8+l19Qfz:vlj/apjwPIiemX2DTW1if

    Score
    10/10
    skuldpersistencestealer

    • Skuld stealer

      An info stealer written in Go lang.

      stealerskuld

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks