Extracted

• • Target

    https://www.mediafire.com/file/v77km8saki0d0e6/zoominthrutraffic+(2)+(1).rar/file

  Score

  10^/10

  skulddiscoverypersistenceransomwarestealer

  • Skuld family

    skuld

  • Skuld stealer

    An info stealer written in Go lang.

    stealerskuld

  • Renames multiple (351) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

    ransomware

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1