General

  • Target

    slinky.exe

  • Size

    14.2MB

  • MD5

    8fc4e318ccc2ac32e26f58a2a7463698

  • SHA1

    b7e1768ffcca9174ba03bb1ee6f3a302ea3ab1fc

  • SHA256

    5f2ed91be1c0731cdcc4ccb888aa3cdc42cf3ba65193dad500fd0122477ef579

  • SHA512

    fcaaf40a74892947dc2eed94c7344f8d2cc11d8f3ef646033978a03eae7fb417ea99d7679f9a20aa3a5a8ac7edc0931c4767797bd1ffe69a6f0b5a4569705315

  • SSDEEP

    196608:LWJafoL/tUoTX4Zqbh1Yf0k7Ma/rkFlgdTaUrPPbdfw:LWsfm/Lbh1lkSFCdTauZo

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://ptb.discord.com/api/webhooks/1267057730678427720/vvlkPl7BTv17Ul9ssbMi39EwrDKqRRbl-Jz88_uJB5XvNhm668d8DKRGlUUpUvNoXpwr

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • slinky.exe
    .exe windows:6 windows x64 arch:x64

    Password: sdf

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections