General

  • Target

    slinky.rar

  • Size

    26.1MB

  • MD5

    c02d06b6616e43e6a5b993ffd6e9ab02

  • SHA1

    69b0b00cbbf5f06eaf6da1d708c910146118613b

  • SHA256

    8e821d40a03bf219e4823ca648e19948ffe8a5e9d02c0917c61010d6d78fab65

  • SHA512

    d239c0600971f283917b64d4b081c1db9e6a12bd6ec565252906a00c7e4ca888a97a70e4647b6c16ea7eebaa63f8c3dd819120c89ad4ac3a1171c3562d73fbda

  • SSDEEP

    786432:GDR8xQWsib535X/elpmNnnFqbZ6dvXRs+:GGQWF5JX/efY5B

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://ptb.discord.com/api/webhooks/1262304792059969556/fyUPRB5FdDVKkteeBILMdxxwDztQAiGbPM8LGLyvygZZy-OC8qRpJvw9ZEofIWBHqRjM

Signatures

  • Skuld family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • slinky.rar
    .rar

    Password: slinky

  • slinky/slinky.exe
    .exe windows:6 windows x64 arch:x64

    Password: slinky

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections

  • slinky/slinky_library.dll
  • slinky/slinkyhook.dll
    .dll windows:6 windows x64 arch:x64

    Password: slinky

    fea4322ee6bcc5ab3c037ce7e50d99de


    Headers

    Imports

    Exports

    Sections