General

  • Target

    zoom.exe

  • Size

    9.9MB

  • MD5

    f402250a79e48d8bd930fef38592c220

  • SHA1

    80d1cf2b52c58c54bfc55a303c816ada540266bb

  • SHA256

    7fec036f563f41e4829910e54eca7c152f36739e54a80dfdc5d1d2c5e00dbcc2

  • SHA512

    9083454566ffd50a2eed6ce8d83b16adb447be3649f21adf4b62c35795e7b6818cd01209432ed0d932746b6dd6f64fc5d92d955de3a64d0508da7c7ab2945b5d

  • SSDEEP

    98304:mpbm4V9MpExwzKVaZr2bpHVsiuR/6QjWEmB2v/ZmHzU:CmTpExwmVNVsiuV6QjTZezU

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1300496286054613073/SVxsTwnKmhZbNX40mVWVkdeX9KOKHg_wrv2KmoWzPvx2qsLCXtHLo-52VR7DJoca64Uz

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • zoom.exe
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections