General

  • Target

    202408211794788462c41d14e2659260f134a304ngrbotpoetratsnatch

  • Size

    9.9MB

  • MD5

    1794788462c41d14e2659260f134a304

  • SHA1

    e977afbac54e557b917abe2604eddee4c72fe297

  • SHA256

    8f2f5de00ac8de98139e3c9a802bedae0368714ea3714eba37ef5778bff86a9d

  • SHA512

    941d567e3316a4388d3554b14a1bf9af8254475811559b253dc9428b1e9c2de4d7d1f307fec9719b2c5968d3893d204d5d189fe312afe5913ff17572bbae2aff

  • SSDEEP

    98304:h3Pm5RixRDyOYDNmdjbiBQILGtneE+ICafZmL4Kjw:hwRixRDyabiBQ6GJbbMjw

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1275570777562943619/CfD-pRhASNI97yrXg8BssfRJRJrGeagBhz72dQfdjXc70hZ50lirmSwHec53Jx0RZ28B

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 202408211794788462c41d14e2659260f134a304ngrbotpoetratsnatch
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections