skuld | a4849f4b4803684252d35b0b96222e896c90f947a97711b626abd00e3142ffb3 | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
08-09-2024 17:21

Sharing

Report Analysis Logs

General

Target

main.exe
Size

3.2MB
MD5

9752c4717f3b7e1ad53f53a4f410f83f
SHA1

f58d6011fd394506d5f5b13e04b6fb00d752fe40
SHA256

a4849f4b4803684252d35b0b96222e896c90f947a97711b626abd00e3142ffb3
SHA512

afb74b717482f4cae044e8b0e8cb362c2c3fbef9282004d1d7062a6d634ff3229f0a5fc2f3f191730e16a5caca0c4d18631d9fb7687d872ffec93459a57aafd5
SSDEEP

98304:7150ZCgssFKffCnRjy7tpQt3vraLYXPJKHpuR:R5Es8sfCjipi/u8XPoHpu

Score

10^/10

skuld stealer upx

Malware Config

Signatures

Skuld stealer
An info stealer written in Go lang.
stealer skuld

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral1/memory/2612-0-0x00000000010A0000-0x0000000001AE8000-memory.dmp	upx
behavioral1/memory/2612-1-0x00000000010A0000-0x0000000001AE8000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\main.exe
"C:\Users\Admin\AppData\Local\Temp\main.exe"
1⤵
PID:2612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2612-0-0x00000000010A0000-0x0000000001AE8000-memory.dmp

Filesize
10.3MB

Download
memory/2612-1-0x00000000010A0000-0x0000000001AE8000-memory.dmp

Filesize
10.3MB

Download