Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
13-08-2024 04:43
General
-
Target
Bootstrapper.exe
-
Size
13.2MB
-
MD5
a20c7241b0483b3673b17d42ad9987ea
-
SHA1
45a38459e0dad54433243a45e5b53fdfe48c333a
-
SHA256
0d64d6c344e5278118e4dc6e91036dc2211bae692d36dfd085c47940b42c768e
-
SHA512
2e7131f1f50b15005cee38d5bfcc77a20ad303e45935dc22664f4b49ad8f8ef459331c7089a44b348c4986076367d425c8e9e40aaa04726f39a590ed539af313
-
SSDEEP
393216:S/S0ZYVrwXh0SJamfZ9/2RofvW/sT4iLYCsOZ:ojZYpqWRmfZ4y+/m4ifsOZ
Score
10/10
Malware Config
Extracted
Family
skuld
C2
https://discord.com/api/webhooks/1272766538968989716/t4bHEulMCc8ZPLSkXHMGfVgD58v1g-K-JZub8tE24Ak0gTGty1chfOxer22lc0KvQs6F
Signatures
-
Skuld stealer
An info stealer written in Go lang.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Bootstrapper.exe"C:\Users\Admin\AppData\Local\Temp\Bootstrapper.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.7MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
31.7MB
-
Filesize
31.7MB
-
Filesize
3.7MB
-
Filesize
31.7MB