General

  • Target

    zwerve.exe

  • Size

    9.9MB

  • MD5

    9688cf5ff838a8d951b98b5e831354ed

  • SHA1

    4fbe1f691648d59c372e2d03d17a013252f79843

  • SHA256

    292b6f8f6b1d5b1b6221ba6b1adb80ec554b61d61e9bb957121d8ceb16a8e34c

  • SHA512

    553ad59a6a66fec70b0364428445796e3257a49ea6a2340eb4f7fba9e711d43720c76acf9543a80704a5e00326b261fdf15701a8907c9df1682da10116369d24

  • SSDEEP

    98304:NQI9wzKxmhMIIKfGTibiyCC9cK8VE2ICafZmwjsEejd:NIzKxmhhtbiyCicRmDUjd

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1284313945175359529/oAI5xFZA4-ekztJ7QNXooNejS1EcAtsj4Ddv5zy_k59bucqD089IfflyO8uUt-sNtITI

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • zwerve.exe
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections