General

  • Target

    20240914c30ae28c04cee9e58485798091d9f1d7ngrbotpoetratsnatch

  • Size

    9.5MB

  • MD5

    c30ae28c04cee9e58485798091d9f1d7

  • SHA1

    4c635124ae929b2e0530e6634bbcd305f98bee03

  • SHA256

    8658f697da87f286d947fc4329ba1265d711689fc2932605f6c2f218c730a202

  • SHA512

    2bdca939098b3084646ef0f74bc0ba54935ac974c4db5d54a65f79977db57522cc06575246f2330735eb5eeb4b64216d1a4e37430f5adc9763483395f8e439af

  • SSDEEP

    98304:gpkPZ5YIPgIXeZePW0Ry8D7eEMYoSF83Q3k:Hx5YI5uiW0RyE7bMYCQ3k

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://canary.discord.com/api/webhooks/1239437762743111712/k9jj7vCKXFM3BMyWJ5Gm1gJFqXp8KRq6kwrtyHoaZFbYQl1FK5znhhOkSlrvL-qKEOsJ

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20240914c30ae28c04cee9e58485798091d9f1d7ngrbotpoetratsnatch
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections