General

  • Target

    slinky.rar

  • Size

    26.1MB

  • MD5

    8322616c176fe28a07a8b59b07986fb6

  • SHA1

    b2106cd95a6e4df245fcca1e579d8aa2312307f1

  • SHA256

    b16965b136c40ef073831e171bee770a1fc658e4c0062569c6dac21025dfe39f

  • SHA512

    0b5d13aae16204e14742c9dfa95ed833f447ee426d1ebb5f117b82af874b2504cd8fc7c6a761a5d5882fbc1cf76d17d155512a6b82b64be12e32a5cf2eac7c9e

  • SSDEEP

    393216:CdKs4l0ur/RqcW5oqp2gIVhgLKv6t63PiwsoTqqw+ydEDnD3lNYeQgfL7hUv/Dfs:CdUd/A5fp2pf6YfjEqvDnzAeQgSv/fU9

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://ptb.discord.com/api/webhooks/1273217330134126612/SE-WfA1lNJifYvdc3hUBb4fwJV--kS1RhwU52PavVF8BkFQ9J2fuWMj8z5iqdokWPQar

Signatures

  • Skuld family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • slinky.rar
    .rar

    Password: slinky

  • slinky/slinky.exe
    .exe windows:6 windows x64 arch:x64

    Password: slinky

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections

  • slinky/slinky_library.dll
  • slinky/slinkyhook.dll
    .dll windows:6 windows x64 arch:x64

    Password: slinky

    fea4322ee6bcc5ab3c037ce7e50d99de


    Headers

    Imports

    Exports

    Sections