General

  • Target

    entropy.rar

  • Size

    23.2MB

  • MD5

    453d1702527f25a018fceb8ce12b4d6b

  • SHA1

    6e3bc3d0b97f39cca39393dd0aae91da9011cf53

  • SHA256

    d41456ccdf1d2b4687316b09c7b76d7eb7448474d7110ac966445b1f0ce398f8

  • SHA512

    4292c3d5cf6a2d15f53e91acb1884f351c6146d11ad7ab076d24b86f1e76cc39205591811537a5d31bf16fca30ea2871e4d652e2b40dbb67198876a00cf79cf8

  • SSDEEP

    393216:PDNoRDRH81+Fv8CxAz3B7pP+gzX3/1jmVkgAs57fCMcaqWhyGSQFuq5uMK1K:PDNKDSYvKLzfRm1aSpn55b

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://ptb.discord.com/api/webhooks/1262305239344611329/Gs3-RPCoo7aA6sV-nvtQQS-vmsy5ze8GqQnSaLH_NWVI19XokPqMYr-i_Q3OnogsvMFc

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • entropy.rar
    .rar

    Password: entropy

  • entropy/entropy.dll
  • entropy/entropy.exe
    .exe windows:6 windows x64 arch:x64

    Password: entropy

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections

  • entropy/entropyloader.dll