General

  • Target

    https://cdn.discordapp.com/attachments/1282846872087695425/1297336024262774907/v.exe?ex=67158dd3&is=67143c53&hm=0374c9cd1d1d534c04fdecb413d1886716b6863a3b05c3b3b0b952688551955e&

  • Sample

    241019-26ey7awhpp

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1284545435142459497/sZJdu71WF2vnQDFx5DbTlbAwGrlYn3vAhSJnEzrtKI0BnkbaxRVHjY9XeJFuMGr-racb

Targets

    • Target

      https://cdn.discordapp.com/attachments/1282846872087695425/1297336024262774907/v.exe?ex=67158dd3&is=67143c53&hm=0374c9cd1d1d534c04fdecb413d1886716b6863a3b05c3b3b0b952688551955e&

    • Skuld stealer

      An info stealer written in Go lang.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks