General

  • Target

    slinky.rar

  • Size

    26.1MB

  • MD5

    710f5f275317d3936d9dcbcb53a579ee

  • SHA1

    b96c3a924aa3642f3b87b7063f7fa2060a9a10d0

  • SHA256

    4bf1ea8ace7f1c427b54adc6c8d9da2f79f5be1475e3ca4609e997e2b93f5e87

  • SHA512

    5775062891166e163b98de8130665bc9d5d400249ba1142e4cd7e901a3c62097347151e8eb58e297ca7b2fc7a36d680b92d3b6d0399a9b009fd0093380da80c3

  • SSDEEP

    393216:T9cWRf8yrPoqsN8KhgKldFVtHyEPXBSeqQTr9BmcfCDLMnyXmJOU7f1cIDuz7Qq4:TSWmcoqstVIcxwMmtnqROecIQ3s

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://ptb.discord.com/api/webhooks/1288586956971835474/KOwZpzzvHgBFnLYWk6PiicTPjzY_P0vpTibLIhpjtTMHi8CPkv2cwuhQTfaTc_MnkUX6

Signatures

  • Skuld family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • slinky.rar
    .rar

    Password: slinky

  • slinky/slinky.exe
    .exe windows:6 windows x64 arch:x64

    Password: slinky

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections

  • slinky/slinky_library.dll
  • slinky/slinkyhook.dll
    .dll windows:6 windows x64 arch:x64

    Password: slinky

    fea4322ee6bcc5ab3c037ce7e50d99de


    Headers

    Imports

    Exports

    Sections