Extracted

• • Target

    LoPi.exe

  • Size

    9.9MB

  • MD5

    1abd63f11821dd425441e659c890632b

  • SHA1

    e4772d6e84217f0c0ff15aa5580a13f3424d2ac0

  • SHA256

    5dc88f47dfefad9feb60493de86d4bbdd407b158f4b6c768759e726ce497754f

  • SHA512

    29eeab5c7c06b83f0557a375c3faf1fd868dfb2d89f2035728197a45bcb664e951fabfbb5191857beb576a8de3a009aef2f7a760d52305c14c754573e9d3b06e

  • SSDEEP

    98304:hzU4brhxBASgf/gEpiji6Ig8TWA7EIICafZm/mbnXg:hxrhxBAGZji6IdThoRTXg

  Score

  10^/10

  skuldpersistencestealer

  • Skuld stealer

    An info stealer written in Go lang.

    stealerskuld

  • Adds Run key to start application

    persistence

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2