General

  • Target

    sigma.exe

  • Size

    23.8MB

  • Sample

    241011-la6h9s1cqp

  • MD5

    7b3b8c7ad73e483139127a259eedb39b

  • SHA1

    8c8951d762a0cd2cdb6cc7ba3112d069fe95a4ec

  • SHA256

    8f9b5cb5362dcbc71f288d310a67b65957a18e83c660078f6d32056a6077c7ed

  • SHA512

    a4d1f60e6bced99b36f5057748ea1515eeccc7d4b1e64930063748c280c8f392962b079ab321e53cf8a366f1dd48ec79f28149a312e6d577f3cc3119d24c4056

  • SSDEEP

    393216:V52BpDr3fdoc+5my5krGTONk+SBw7MSM5lMVFoga:b2Bp/7+0yBuk/BwJMzmFoga

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1294219914600513648/1hMj8NibsG6kkmCebWQXD2dsOS3COgpf78DC2CqwIi8Ve2EgBTg8fRzgTY1uxq8ArsSQ

Targets

    • Target

      sigma.exe

    • Size

      23.8MB

    • MD5

      7b3b8c7ad73e483139127a259eedb39b

    • SHA1

      8c8951d762a0cd2cdb6cc7ba3112d069fe95a4ec

    • SHA256

      8f9b5cb5362dcbc71f288d310a67b65957a18e83c660078f6d32056a6077c7ed

    • SHA512

      a4d1f60e6bced99b36f5057748ea1515eeccc7d4b1e64930063748c280c8f392962b079ab321e53cf8a366f1dd48ec79f28149a312e6d577f3cc3119d24c4056

    • SSDEEP

      393216:V52BpDr3fdoc+5my5krGTONk+SBw7MSM5lMVFoga:b2Bp/7+0yBuk/BwJMzmFoga

    • Skuld stealer

      An info stealer written in Go lang.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks