General

  • Target

    2024090806bba3de6cb897291a87e25dc1fb1348ngrbotpoetratsnatch

  • Size

    9.8MB

  • MD5

    06bba3de6cb897291a87e25dc1fb1348

  • SHA1

    d6cee17ed905c50444389c1a856cffcb97ba7e51

  • SHA256

    d9e5cd6540b2b079303ece88e64defd80f86b4b61d83f17e0e935cff94d44734

  • SHA512

    044f9fc795255c1e79d2f1bcf5639eb6ce7a8d936f011a2da62c411c8b443fa4c51d6b0baff5fb233c23cb41ff465b5687bfd474e7ab7861edc291fcf4bad543

  • SSDEEP

    98304:AOYVw4GTh3/cwrBz9HJGalTbCekYTGMCBEXOTThZ4zzF:AW9h3/1walTbfkYTGMCC+szF

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1259097566084071475/ipsUcitO2Ssgzt0fWfy20DeLTo9uhG0Z863sOZgL2tjvYoK90r6Aeaf2NWiQQBpL2gfj

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024090806bba3de6cb897291a87e25dc1fb1348ngrbotpoetratsnatch
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections