General

  • Target

    202409154caa49c56b91366cfb39cd590067a979ngrbotpoetratsnatch

  • Size

    9.9MB

  • MD5

    4caa49c56b91366cfb39cd590067a979

  • SHA1

    8a4d080acae140d2f59923a14aba79fb9c2a6b31

  • SHA256

    b27bf8c19559b1667bd9dda9bc0e493b0c943a698b94e05dd12b8b659fadf33b

  • SHA512

    e5964a9f13282462f4051a8e889e5a534e48147bc4db5f3fe07382d2cb0f744bac9d86b9cc8cf1724b04b0377ec5f1eea1da19b734535a3a5e5b9053cc6c582d

  • SSDEEP

    98304:0QI9wzKxmhMIIKfGTibiyCC9cE8aE2ICafZm7jsEVjd:0IzKxmhhtbiyCicDHDajd

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1135938366463029258/vJmeyFxpmZaKbzjPYsSWaz4Wl0kpI1mEtdYVOK105NQx9rzZ1ORARwaZNiuwBNU_zT6t

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 202409154caa49c56b91366cfb39cd590067a979ngrbotpoetratsnatch
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections