General

  • Target

    entropy.rar

  • Size

    23.2MB

  • MD5

    15ec05cdc176dbab41a59bbc6669384b

  • SHA1

    1fe7aad71aa5fbab853ead759281ce9ac58458c0

  • SHA256

    5b49adb0e97c0c26a2e391c0e0f452ab33f26e070c053c85c5e01bbeb2a2bb34

  • SHA512

    9ab1186695c896892d719d422644e883abd89bde40fad2d3ce429f5419d8c9fcea4c5574bff0baa2e2818cbf2846c4962ddbf15d3a8a4e9ac0121110d83fb4bd

  • SSDEEP

    393216:upm9b8IdRGA6HVL70qvAP56u3jaqAc6YVb0a7+xQwtfVGCCa0Oo4jq/eCp7l3:Am2L70fR6uTaBYFnJCM9a0Oo4jqf3

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://ptb.discord.com/api/webhooks/1284129975246524467/2KIQ0y_EKuR-2Ekg7DykajQRxBZ2HFJZflNz40zZOjAKjmmmVSa64WpWtZe6io39h_Dl

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • entropy.rar
    .rar

    Password: entropy

  • entropy/entropy.dll
  • entropy/entropy.exe
    .exe windows:6 windows x64 arch:x64

    Password: entropy

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections

  • entropy/entropyloader.dll