Overview
overview
10Static
static
10bin/Accessibility.dll
windows7-x64
1bin/Accessibility.dll
windows10-2004-x64
1bin/D3DCom...r3.dll
windows10-2004-x64
1bin/Direct...er.dll
windows7-x64
1bin/Direct...er.dll
windows10-2004-x64
1bin/Humanizer.dll
windows7-x64
1bin/Humanizer.dll
windows10-2004-x64
1bin/ICShar...er.dll
windows7-x64
1bin/ICShar...er.dll
windows10-2004-x64
1bin/ICShar...rp.dll
windows7-x64
1bin/ICShar...rp.dll
windows10-2004-x64
1bin/ICShar...VB.dll
windows7-x64
1bin/ICShar...VB.dll
windows10-2004-x64
1bin/ICShar...ry.dll
windows7-x64
1bin/ICShar...ry.dll
windows10-2004-x64
1bin/ICShar...ew.dll
windows7-x64
1bin/ICShar...ew.dll
windows10-2004-x64
1bin/Iced.dll
windows7-x64
1bin/Iced.dll
windows10-2004-x64
1bin/Micros...rp.dll
windows7-x64
1bin/Micros...rp.dll
windows10-2004-x64
1bin/Micros...or.dll
windows7-x64
1bin/Micros...or.dll
windows10-2004-x64
1bin/Micros...es.dll
windows7-x64
1bin/Micros...es.dll
windows10-2004-x64
1bin/Micros...ng.dll
windows7-x64
1bin/Micros...ng.dll
windows10-2004-x64
1bin/Micros...es.dll
windows7-x64
1bin/Micros...es.dll
windows10-2004-x64
1bin/Micros...rp.dll
windows7-x64
1bin/Micros...rp.dll
windows10-2004-x64
1bin/Micros...or.dll
windows7-x64
1General
-
Target
slinky.rar
-
Size
78.1MB
-
Sample
241108-bl3awavjcp
-
MD5
a8f7758fef3de9737d2f87c21a49369c
-
SHA1
e6e9668543f9b8d841ae3ba829b3ef23fc930f24
-
SHA256
fdfba94118a83e52142821d091e2bba6bca54d18521745c3ee4ae8b9d1de5ddd
-
SHA512
a6cf00026e11c656ae2ccb0e19ba575c1f255916116137334a7db1e63271472fabd2346dbff304d93c3b100a661dbb9f3ad188c71d35d2ed23d538de8e881ea3
-
SSDEEP
1572864:+LN64E+B4WDiHnbLj5CxXrD2Nz4+FT5sX5XXTnKhGOt3KmftOZTa9:+Lw+BdDgjKXfa4I5sJnzKTtHtwe9
Behavioral task
behavioral1
Sample
bin/Accessibility.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bin/Accessibility.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
bin/D3DCompiler_47_cor3.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral4
Sample
bin/DirectWriteForwarder.dll
Resource
win7-20241023-en
Behavioral task
behavioral5
Sample
bin/DirectWriteForwarder.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral6
Sample
bin/Humanizer.dll
Resource
win7-20240903-en
Behavioral task
behavioral7
Sample
bin/Humanizer.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral8
Sample
bin/ICSharpCode.Decompiler.dll
Resource
win7-20240903-en
Behavioral task
behavioral9
Sample
bin/ICSharpCode.Decompiler.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral10
Sample
bin/ICSharpCode.NRefactory.CSharp.dll
Resource
win7-20240903-en
Behavioral task
behavioral11
Sample
bin/ICSharpCode.NRefactory.CSharp.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral12
Sample
bin/ICSharpCode.NRefactory.VB.dll
Resource
win7-20241010-en
Behavioral task
behavioral13
Sample
bin/ICSharpCode.NRefactory.VB.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral14
Sample
bin/ICSharpCode.NRefactory.dll
Resource
win7-20240903-en
Behavioral task
behavioral15
Sample
bin/ICSharpCode.NRefactory.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral16
Sample
bin/ICSharpCode.TreeView.dll
Resource
win7-20240903-en
Behavioral task
behavioral17
Sample
bin/ICSharpCode.TreeView.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral18
Sample
bin/Iced.dll
Resource
win7-20241010-en
Behavioral task
behavioral19
Sample
bin/Iced.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral20
Sample
bin/Microsoft.CSharp.dll
Resource
win7-20240903-en
Behavioral task
behavioral21
Sample
bin/Microsoft.CSharp.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral22
Sample
bin/Microsoft.CodeAnalysis.CSharp.ExpressionEvaluator.dll
Resource
win7-20240729-en
Behavioral task
behavioral23
Sample
bin/Microsoft.CodeAnalysis.CSharp.ExpressionEvaluator.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral24
Sample
bin/Microsoft.CodeAnalysis.CSharp.Features.dll
Resource
win7-20240903-en
Behavioral task
behavioral25
Sample
bin/Microsoft.CodeAnalysis.CSharp.Features.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral26
Sample
bin/Microsoft.CodeAnalysis.CSharp.Scripting.dll
Resource
win7-20241010-en
Behavioral task
behavioral27
Sample
bin/Microsoft.CodeAnalysis.CSharp.Scripting.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral28
Sample
bin/Microsoft.CodeAnalysis.CSharp.Workspaces.dll
Resource
win7-20240903-en
Behavioral task
behavioral29
Sample
bin/Microsoft.CodeAnalysis.CSharp.Workspaces.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral30
Sample
bin/Microsoft.CodeAnalysis.CSharp.dll
Resource
win7-20240903-en
Behavioral task
behavioral31
Sample
bin/Microsoft.CodeAnalysis.CSharp.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral32
Sample
bin/Microsoft.CodeAnalysis.ExpressionEvaluator.dll
Resource
win7-20240903-en
Malware Config
Extracted
skuld
https://ptb.discord.com/api/webhooks/1296774769303359571/SuAqJEaZ8HyMJeY4XNdTzjqboa7EQQC9NlFu7Nm8gWVWabNPEFyEqvUIK1mdFAcYMMWN
Targets
-
-
Target
bin/Accessibility.dll
-
Size
19KB
-
MD5
ee37842ca98dcf5e05ef2cd37ba7b192
-
SHA1
c5bacae0f7221824c4a6e836636d4f995581c166
-
SHA256
3b2fb9f8a86546c3369819611cad29a037eb9dda399c7894f8332350d05dc30f
-
SHA512
ede609220c52a8ec5fec6c8e6f0a5425526843fde4814ed4a79609fe706b13a12708c79a28662faa9833115100d5dbf88e0024551611cfe838a67213956acdf4
-
SSDEEP
384:3WI/W82rkSiVKmE+FNZgOcHi+/dHRN7KfVlGsa9QAR:LAEEfOcHFFxHR
Score1/10 -
-
-
Target
bin/D3DCompiler_47_cor3.dll
-
Size
4.3MB
-
MD5
7641e39b7da4077084d2afe7c31032e0
-
SHA1
2256644f69435ff2fee76deb04d918083960d1eb
-
SHA256
44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
-
SHA512
8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5
-
SSDEEP
49152:aYlc/220PPiMLKam+VMrLi21f4i3jn5ZO3XUDmOZQwVd2uQpN3WsGVUWd55i/jrs:a6KD2Mrdaix4NQnLt
Score1/10 -
-
-
Target
bin/DirectWriteForwarder.dll
-
Size
485KB
-
MD5
fe18b6ed4c63d18156217dc30f1482e5
-
SHA1
1d1eccc4e03b086d49c453b4e5716e164892f006
-
SHA256
1f1093930ebc3779f2d4659ed3a31fd05cfa1dbffc0f7575955cb28e7b990c64
-
SHA512
c5c6e64eb2ab0ef93f6d823e002f895333983f4d151ac7296c7de65e9fb8096502f8db3035ded3612fb9c6c99a8a1c09c81c3ff84dca7e1b5c5b803d10e36052
-
SSDEEP
6144:aWmS5E0UvK2VMFiQT29ukf5rP22hTITqu2C9Bj1LRP60M8xsVaam53EvW+0Y9seY:aWmaMVMFoxuTRghYZIHQa12N
Score1/10 -
-
-
Target
bin/Humanizer.dll
-
Size
207KB
-
MD5
5fc547c851275cc7a1227843c7b35daa
-
SHA1
5e22f33bf7dfa5047fc9f661cf7ae069832bf006
-
SHA256
40dff6faebcc6e2babe37003853509b2050e806edf3c5f141fbb85fdc0d1bea7
-
SHA512
3382ec32d38bac335fb01464337bc0189a1f8cef33fb94c5d99c02655b4c14160fdf02786789a9687c1d651af0ca1a2b55417e8f32570ec5355e44624266acca
-
SSDEEP
3072:3EMxgfS3v/xcvZL8i6KHgFgJyEnJi5NV2XpFY7oejVLqoLbBr6h7sA/:37xgf+WlJiJ2XLYMejVTV6t
Score1/10 -
-
-
Target
bin/ICSharpCode.Decompiler.dll
-
Size
509KB
-
MD5
3f0b190b2c3de675c5dcd932ceecfe98
-
SHA1
f0c5c533ac50f0009ab3bc7ed2935b2cfbf01d55
-
SHA256
eea43e707cc5212eb2c32f788df7441b47e5e13ef6ef4a3a9bf2cecba3d51bc0
-
SHA512
907b047d0f679ae657083d3c7aea5daed2c1aa678d35674f0c23438c2a2e7e61ca19b2f362294ec6d7edc9b9367659594cb071d4deadd97d3375f71cf83c74d1
-
SSDEEP
6144:3Nulek0dQJywv/2ABniCx3DIWBQREWTWRKKxJ3s6gLP961yMINV6X20qlJJY+K:3ogpdQ0CFIytT5gMIhlJJY+K
Score1/10 -
-
-
Target
bin/ICSharpCode.NRefactory.CSharp.dll
-
Size
576KB
-
MD5
bb9b505e8de119d455b960dcdfd1379b
-
SHA1
7e513fae3fbee42a8321e2dd25715552a8e54acc
-
SHA256
9e5990f9b907e29a1b3cadecc278df05f27eb0e6130f135beb4b0152ccf2e9d2
-
SHA512
aa307588a0116472af36c8b4accf221d352e0b35e83f4861f661cc1caff5603128775ec3eeb5537ec3b66f946ac963133a62fe52f18349927edd9f8dc0cef66c
-
SSDEEP
12288:ItCo5SPhdfREvnwYCA+zkPggzWKOPKdCCfnPGJKI/k+5fxgyH1JZFkHHLVX4xbc1:TyO+Yse
Score1/10 -
-
-
Target
bin/ICSharpCode.NRefactory.VB.dll
-
Size
193KB
-
MD5
105185942e3b82168e85aca9245f177d
-
SHA1
c72a5b96d4831cdbcfbe401700becca8f9f58786
-
SHA256
54b757f43b63946b9e666c827f0023dce715ae09c45d762d267a08866fd9657c
-
SHA512
f869bf91fd30ca9cfe4bff42920e5b6cfed4646ce8839fc0875c83218821e96639558942215f9c43d24dbfe2a008bab8971d24b52407df9a4504cfe219e4fb04
-
SSDEEP
3072:PxvLbDjY3yiq/5WtOmas2MY4aVP/lTCcWlR0L2Pjs9vN7mGT:lLbtSQM5tbl7M7
Score1/10 -
-
-
Target
bin/ICSharpCode.NRefactory.dll
-
Size
280KB
-
MD5
599ac99e9726762a0430ca3c3b77f3c5
-
SHA1
889b575c6de2bcd8eda28fe3dc75879b388622fd
-
SHA256
7ae880504db44b9811d57c615e42107c2aace31a2683a83bfad2e00f4e03beef
-
SHA512
bd459ef5f0599eeb0601b7fd219db7aaded22c193a3672da057da84062c5cd50abe252564cb38233bd1cf886ed2353ecad5851a97b95fce8b3bebf1d61df87ff
-
SSDEEP
6144:26ene6DxXV3tcP9LT0WdT0eM3jTLdKlyn+lR+3Y:26eeuxhtQTDM3jTLdKlyn+lR+3
Score1/10 -
-
-
Target
bin/ICSharpCode.TreeView.dll
-
Size
58KB
-
MD5
1c754b4cf6bb9d6f36132b0dd0042a89
-
SHA1
490a800de4ba5ab32c7c5d04e68b4e23abde3666
-
SHA256
af3e6cef5342c7d7dd813913dde2c765c1501ecf0832397dbb631cd5d15dda21
-
SHA512
b61f4cf7f599db4b3083cd5e9f739afa239f408e6ead3bac7eed47babe8a8fde6c76110e8ff237606dd7176f4bc3ff56676f71f8ca329e46cc93439fbe2dd170
-
SSDEEP
1536:8jwWaYuo0UVdlY4dDAtV2n//bbvlZhtTVDS1UFL6THwLurd:8U1Yuo0UVLxOUn//3NtCUeB
Score1/10 -
-
-
Target
bin/Iced.dll
-
Size
1.6MB
-
MD5
664c15683a6a3fb4204d5f1ff42e2e5c
-
SHA1
181591babf235320241075da4c60d1bfe21c8285
-
SHA256
dec71b0af2c2267fa1ca8d1465faf914ab5350c7407d0e35edd690d1b4f421fb
-
SHA512
cf5f17bed9e4b437c7354a1495a009de1f3ac3ffd1b59f9b8662b12c30f0c2e5e8f8f65610a433ff0be099963bc6c8a2a236bbdc8e8a0d8f35ef401da1fe06ee
-
SSDEEP
12288:TSDMaFobUafDLGzkXNWx5g/nKjysieauTB6TJGv7FN7Q/918Gs2jRweNsUTrk61U:CkdWx5LvM/n1weSUTrk61uihPQ
Score1/10 -
-
-
Target
bin/Microsoft.CSharp.dll
-
Size
969KB
-
MD5
bdf6562009602901303b767a491d38e2
-
SHA1
a1f3a8ba254643f2d5ef5c3a2b0cf9ce253156d9
-
SHA256
4179e606cef583e8ea2e022e66a9c1320b2234be6663cf96133cb7bd2e89c084
-
SHA512
e1f00a4e54c251d9051ba59e0a98c4dae0bfcf891895b1128d70122b5eb451628c60ee04f419a22d0c7247c80d7f98f08958ae8d28c2b49e84e70a5d5897e60c
-
SSDEEP
24576:v8CEpORInlfl9o9yH8jIDmAp5zn6xO6p1HufYwdHah:tSd9o9yH8kDmAp5n6XHCRZ
Score1/10 -
-
-
Target
bin/Microsoft.CodeAnalysis.CSharp.ExpressionEvaluator.dll
-
Size
99KB
-
MD5
c093e7d2deac718331b5a1f90a296e82
-
SHA1
57b1e624faa420481a1b8efff8949a8f3a69c010
-
SHA256
afdaf3294c67480ba855ca06f6750762a7828d4a104d79a32569c6f334a743c1
-
SHA512
a6602766979a732885f6ffc1bc5dbaf9f2e4dd9640bd8e3478d60bc3114a0e62180b3d7e59d3707a48890beffd0bfcff2d32e0fd50d43d5a380fbbbe379a741b
-
SSDEEP
1536:Rbf5/T3RO4A67T0V3etHeI43tvlKKmCuwMvNtO8P/aqCYYISv74osfy7NB6S+XPb:1V3A4AoHf4dvAKmCuwMS8X1LYIn2m7
Score1/10 -
-
-
Target
bin/Microsoft.CodeAnalysis.CSharp.Features.dll
-
Size
955KB
-
MD5
d0b6f0df27507b3321e57b04b15cccd6
-
SHA1
82940bc154bc81a18bb4678f60a4de268c6babf9
-
SHA256
fd7c989836facb6341057062bb87ae35ecce722de3329cc63930bc0d875dc1f8
-
SHA512
e7a78e8a4dc3d31c16ba8a3ae1c62bfb6f8267b80e58468190e4044494ac727d6b9f521209c0e749cd53e6059c82542c3f773d9e5cbf97816b4e9be553a7d49f
-
SSDEEP
12288:rqRBrFpSQor5EjxSKV1W+OWPb1sbTfncPAqoBPxfeh7z:6eQnVswsbTfn7Oz
Score1/10 -
-
-
Target
bin/Microsoft.CodeAnalysis.CSharp.Scripting.dll
-
Size
28KB
-
MD5
975129c8b6a6e514c231441630179bd7
-
SHA1
6e0d9e9abe646d574eebaa5359b9e16d6407a722
-
SHA256
c7b0746b960654a0cb51df95feb1fcd16b8ba99a1369a5603b00abcf31cb6b44
-
SHA512
e2919caaf0bf3a22dca384bb257a075513829bba71d4e9babe5e64d995fb26a43858a75f883811ef50be9c49a7b22a3a79943eb157adc464a6fae65ec0c29535
-
SSDEEP
384:SnkPsVDzfK8DkGP4D8oewY2kGqln2XhtmGkIcyWkVfW8S/0Lg/dl//Hq:kkGfdna8oe6lq12XhwGkTYRS8AK
Score1/10 -
-
-
Target
bin/Microsoft.CodeAnalysis.CSharp.Workspaces.dll
-
Size
692KB
-
MD5
7a56b5cb02da5b7208706ee49abd9d43
-
SHA1
a331b07be743af5ba274249687578a28ce7b68eb
-
SHA256
310ebdfce5f3ffa522fdce334fae8938cb1db3fa887c4e7218e90e78c7a90e67
-
SHA512
8c94439daa5b506500099d1549fee089640b65c8209665a42987d5401d664528d539adcfd992cbb66d740cdd377882e385d561476818cbdc28dc7a8bb19963a3
-
SSDEEP
6144:VYbRJSfgneMuliMfTxwbxwgnjXP2V1Yh7TCJfNwIewaIRIfhCGz5Xo0gGfQmDm8K:LwsNfTxQx36V1YhOqIDu4fz8s8h9Y5R
Score1/10 -
-
-
Target
bin/Microsoft.CodeAnalysis.CSharp.dll
-
Size
4.7MB
-
MD5
38343f3d8108eed296fdf5aa19102e20
-
SHA1
f0995115254a0a76ac05329812368674dfa4f2ff
-
SHA256
75e17c4aa3d0374ecf1d04c2de449f6eee9f13cf5f291bb8c8c0d170b1cea4c8
-
SHA512
ea34cafb1af2abacbdaa826c3b060fd2772a912e5497e3fd373a5f88c3ec0a122671c55b541bb2f56cb8f8d86e9dd236aa3b61869d1589e3d97b7683564c2a7d
-
SSDEEP
49152:gLlgqJOlmNmIFmLaXyXXjZJ0NZg39C+SDm00zc95YXjlB42hmNJQtf:tP4xWXXjZJ2Zg3VT+6jvb+af
Score1/10 -
-
-
Target
bin/Microsoft.CodeAnalysis.ExpressionEvaluator.dll
-
Size
66KB
-
MD5
74df985b48b8cfbf96fbca0248591d74
-
SHA1
0630e74fd47b2b675524e4e628bfaf6e9b79e964
-
SHA256
b130cfbb4dd9855cbd6627755e3826f90585f5891edb037515b74d8af80a90fd
-
SHA512
a0c17a51db9dcc3855e3e0ae4989fbcabad756dcfc763e1ca0b11932fa606c6113e9e10c0fb0c4a0a92abba5f7f0bab6135950cfe4112f64a918c4398fb45a1e
-
SSDEEP
1536:CeYDhga9x5QnTW3bX3XOKhHPiwLRA1BdAbRW:taGaaW373XOKhHPiwLRuBdAbRW
Score1/10 -