Overview

overview

10

Static

static

10

skuld.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    skuld.exe

  • Size

    9.5MB

  • Sample

    240811-k6r53stbmr

  • MD5

    655c7596f98a9c606483e69e5c8c9ff4

  • SHA1

    bede56d95e12fad34087580bbf1c017b9e2c7ed1

  • SHA256

    6a2e5993469b6b620c3ef4a9352e6e2b8d825146e3fb388391b8e91b47594503

  • SHA512

    33097433252dd9618bf362031dffa50740e83d72cbf3733f6e7a4d156e3e7ba732f01a56037555d57cffdbbe2f060353f8c4935fc7ec8add2031147c80701519

  • SSDEEP

    98304:8LHFot0wLNGDRSdL8oT+ia1+mkAEQmP7F/Bz2aIP:iOt0wLX8oT+H1+mk5Qmz5IP

Score
10/10
skuldpersistencestealer

Malware Config

Targets

    • Target

      skuld.exe

    • Size

      9.5MB

    • MD5

      655c7596f98a9c606483e69e5c8c9ff4

    • SHA1

      bede56d95e12fad34087580bbf1c017b9e2c7ed1

    • SHA256

      6a2e5993469b6b620c3ef4a9352e6e2b8d825146e3fb388391b8e91b47594503

    • SHA512

      33097433252dd9618bf362031dffa50740e83d72cbf3733f6e7a4d156e3e7ba732f01a56037555d57cffdbbe2f060353f8c4935fc7ec8add2031147c80701519

    • SSDEEP

      98304:8LHFot0wLNGDRSdL8oT+ia1+mkAEQmP7F/Bz2aIP:iOt0wLX8oT+H1+mk5Qmz5IP

    Score
    10/10
    skuldpersistencestealer

    • Skuld stealer

      An info stealer written in Go lang.

      stealerskuld

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks