Overview

overview

10

Static

static

1

URLScan

urlscan

https://mega.nz/file...

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://mega.nz/file/JLtQ2IyA#lLkRLj-vkg_SlEzeRpogGn_bG9grIXlqdi8889qeTDM

  • Sample

    240928-n7nqtsvdpj

Score
10/10
skulddiscoverypersistencestealer

Malware Config

Extracted

Family

skuld

C2

https://ptb.discord.com/api/webhooks/1288587368357691492/f6mEc_FzE-0rWvSFgK4IhjmpgbSQPZiB68NsOLb9EE3BfoQbAE6r4kjnh-Luc4aVRpR4

Targets

    • Target

      https://mega.nz/file/JLtQ2IyA#lLkRLj-vkg_SlEzeRpogGn_bG9grIXlqdi8889qeTDM

    Score
    10/10
    skulddiscoverypersistencestealer

    • Skuld stealer

      An info stealer written in Go lang.

      stealerskuld

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks