General

  • Target

    skuld3.exe

  • Size

    3.2MB

  • Sample

    241030-mjs5zazney

  • MD5

    96cf5bfd737ba042e552c66fbd2d344e

  • SHA1

    861e144cce53b756a81079923011ad87d6e3ce13

  • SHA256

    a4a66b5826dbc95ed463bf1daaa417ae99ea8b1b27ddbacdceba94657babbafc

  • SHA512

    6c3d9c276d3bc83d2043566da244af4d67f78f8cfb91fefb2c94204a02ab14f51a422407c912d80270959e1673af5edc2ce329821ff7b3daeb7e4e093199b2e9

  • SSDEEP

    49152:yRlxzPzhxMQodCf1Cot+sZsjCsx1S+Of/3SoIT92oOXXbKUEucvUgiekSfmAre1W:yLpxMQt7kCszJ6/3Soe2XXkuZ/Ar

Malware Config

Extracted

Family

skuld

C2

https://discordapp.com/api/webhooks/1293231846204903474/NlFoQQli1eEBiZ1mTgA4lGWcgDGUPQu-TH2KjA0djnkLkN-1Rj1Y4K7wda0xn3Aw-GJk

Targets

    • Target

      skuld3.exe

    • Size

      3.2MB

    • MD5

      96cf5bfd737ba042e552c66fbd2d344e

    • SHA1

      861e144cce53b756a81079923011ad87d6e3ce13

    • SHA256

      a4a66b5826dbc95ed463bf1daaa417ae99ea8b1b27ddbacdceba94657babbafc

    • SHA512

      6c3d9c276d3bc83d2043566da244af4d67f78f8cfb91fefb2c94204a02ab14f51a422407c912d80270959e1673af5edc2ce329821ff7b3daeb7e4e093199b2e9

    • SSDEEP

      49152:yRlxzPzhxMQodCf1Cot+sZsjCsx1S+Of/3SoIT92oOXXbKUEucvUgiekSfmAre1W:yLpxMQt7kCszJ6/3Soe2XXkuZ/Ar

    • Skuld family

    • Skuld stealer

      An info stealer written in Go lang.

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks