General

  • Target

    slinky.rar

  • Size

    26.1MB

  • MD5

    3b10fbaa700b588fbab51c2586d3ddc4

  • SHA1

    3f3b0672d4cdd4a5972b87ca876c3cf01f8b9161

  • SHA256

    c9ee3e9731b8643c2d797a90adcb848bdd2cb90e7ff06c7ec6589550107d7aae

  • SHA512

    94fda05c45d9a674a36b1cd469a544f4590ee2d4922c7ab30e6c592152b0ce408fbe580a1a67930e70db6b0a8aad3201f26e5438893fab253021705101388e31

  • SSDEEP

    786432:Mqrf+HdyB6/qrVjTFYL4nTFhy8MAurhrWfiVX:MqrfT6SrVjTA4TFhVgrhrWfiVX

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://ptb.discord.com/api/webhooks/1267444280629133384/93lgPC5prxwm7kfEOYzZT9pM4aGa5M70dJhLbOvmKWx-H6EKIXoR_k1Z9HoM8VPO8jTA

Signatures

  • Skuld family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • slinky.rar
    .rar

    Password: slinky

  • slinky/slinky.exe
    .exe windows:6 windows x64 arch:x64

    Password: slinky

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections

  • slinky/slinky_library.dll
  • slinky/slinkyhook.dll
    .dll windows:6 windows x64 arch:x64

    Password: slinky

    fea4322ee6bcc5ab3c037ce7e50d99de


    Headers

    Imports

    Exports

    Sections