General

  • Target

    nl.exe

  • Size

    9.9MB

  • MD5

    fd4ceb3124de74d27b1e053b3a44dcca

  • SHA1

    bc58663c46fa19005453b859bc8e4a44a0816243

  • SHA256

    866f73e89b19292ef7f39485f9d093b4bbc21cb2d3292d62e278b6cb5fe7de11

  • SHA512

    d07f7a1495eca9f1eac12f5c84e1d03e260a260a679c4b2ea777b6f4772a4227323f3df808e6350e63fa1941307b3fcb67de7def080b92c68df23507a581d2c4

  • SSDEEP

    98304:DSqYOqIFdnwzdDhHPymsT9c3UsfFXHpE9BYvFZmFzy:2qYOdnwj6N9c3UsFXHqawzy

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1260333551942111372/4gpxXiU9xRYUak-aWfhKxT_Nyvup-qEsbKZjdhfzO86zphXTLumB7Wst6za50y_tDm4E

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nl.exe
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections