General

  • Target

    entropy.exe

  • Size

    14.2MB

  • MD5

    0e40b0eb1e7a6672ca2812ad78ee714b

  • SHA1

    51d13063ac9e6c7225fcbda4f13b68b051ca96e2

  • SHA256

    95e29851fb9d29ee21c48dc87bb669ec06d2a6db60922ec73043b8fd4630d035

  • SHA512

    450dcb23d2fc83ad36fe4bb71d195b964681ff61c737856d2d4f2910c0a356c3f1f70731c86cd0321d02c234b57ebbc6380bb6e50b2bb1f9982d682ad8902c88

  • SSDEEP

    196608:HWJafoL/tUoTX4ZVbh1Yf0k7Ma/rkFlgdTaUrPPbdfw:HWsfm/sbh1lkSFCdTauZo

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://ptb.discord.com/api/webhooks/1267058261421719747/N7C5RP-wXgHeSDB4BWMs2Ko5UBBiIQ709xogOS8u0YASraLWDzWwh6t3glJbMvIoMV9U

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • entropy.exe
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections