General

  • Target

    LoPi.exe

  • Size

    9.9MB

  • MD5

    1abd63f11821dd425441e659c890632b

  • SHA1

    e4772d6e84217f0c0ff15aa5580a13f3424d2ac0

  • SHA256

    5dc88f47dfefad9feb60493de86d4bbdd407b158f4b6c768759e726ce497754f

  • SHA512

    29eeab5c7c06b83f0557a375c3faf1fd868dfb2d89f2035728197a45bcb664e951fabfbb5191857beb576a8de3a009aef2f7a760d52305c14c754573e9d3b06e

  • SSDEEP

    98304:hzU4brhxBASgf/gEpiji6Ig8TWA7EIICafZm/mbnXg:hxrhxBAGZji6IdThoRTXg

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1296197362108338248/k492vQ1I3SDXcmvWcvsy2EcSUzrwhNmILrYhR3qSF8R7tkcE-C5GgZSxuS3IlNschBWg

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • LoPi.exe
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections