General

  • Target

    slinky.rar

  • Size

    26.1MB

  • MD5

    2c6bddc33cec241b955de61acf5b3443

  • SHA1

    d0d7fd56c6801edfe7d630e1760b4898b0a96010

  • SHA256

    d2eaee32dee01579196e56203860fcf7280b1e327e6c37aaea3842477610154a

  • SHA512

    a95254ccf49431214638205a404bf022c2dc0de45a46ff412d1161998274e1e72f71656e1814780e34acfb4dc51ddfdf7ea8408342152f66e2cdf6ff29448b63

  • SSDEEP

    786432:muYvfKGq1vSjY/DY3MacWVHewsG483Z6bD7N:mPvfKGqJS8/DnALsG6HN

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://ptb.discord.com/api/webhooks/1272127018074640406/dHVa75jSMPaiEdYbiSLUjNWITHphosFrlmkfwpka_RSvNBCLhgp_ZiHAdnIAbdCZnLgB

Signatures

  • Skuld family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • slinky.rar
    .rar

    Password: slinky

  • slinky/slinky.exe
    .exe windows:6 windows x64 arch:x64

    Password: slinky

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections

  • slinky/slinky_library.dll
  • slinky/slinkyhook.dll
    .dll windows:6 windows x64 arch:x64

    Password: slinky

    fea4322ee6bcc5ab3c037ce7e50d99de


    Headers

    Imports

    Exports

    Sections