skuld | eb69219e7087d2cde2b4d5fc8f5916e6da4c8ded26d596225c9ffdb6432afe7c

Sharing

Copy URL Twitter E-mail

General

Target
eb69219e7087d2cde2b4d5fc8f5916e6da4c8ded26d596225c9ffdb6432afe7c
Size 9.9MB
Sample241110-elc8jaymgy
SHA256 eb69219e7087d2cde2b4d5fc8f5916e6da4c8ded26d596225c9ffdb6432afe7c
MD5 b9e0806263b66ad2c40a42ba4b0e1afa
SHA1 e797f845e0326d085ea59ab07f1bfe5c97366972
SHA512 5078cc2d5f39edcc33b6dc75a1d472be072ae7ab04867233dc6ebc2c527b6eb403bd8171872819476d442219d8f67484e38da29790f9b99f5cf3709e430d5692
SSDEEP 98304:OzU4brhxBASgf/gEpiji6Ig8TWA6EIICafZm/mbnXg:OxrhxBAGZji6IdThnRTXg
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

skuld

Malware Config

Extracted

Family

skuld

https://discord.com/api/webhooks/1303511495669452840/YMUYaitq1zYOnhWAEVTNaVIdpFxeL0NRpgtnapspyivC9Zkqm099aqfP1_BHdvn5J08S

Signatures

Skuld family
skuld

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb69219e7087d2cde2b4d5fc8f5916e6da4c8ded26d596225c9ffdb6432afe7c

File Explorer

eb69219e7087d2cde2b4d5fc8f5916e6da4c8ded26d596225c9ffdb6432afe7c

.exe 9.9MB

eb69219e7087d2cde2b4d5fc8f5916e6da4c8ded26d596225c9ffdb6432afe7c

IMPHASH d42595b695fc008ef2c56aabd8efd68e
SHA256 eb69219e7087d2cde2b4d5fc8f5916e6da4c8ded26d596225c9ffdb6432afe7c
MD5 b9e0806263b66ad2c40a42ba4b0e1afa
SHA1 e797f845e0326d085ea59ab07f1bfe5c97366972
SHA512 5078cc2d5f39edcc33b6dc75a1d472be072ae7ab04867233dc6ebc2c527b6eb403bd8171872819476d442219d8f67484e38da29790f9b99f5cf3709e430d5692
SSDEEP 98304:OzU4brhxBASgf/gEpiji6Ig8TWA6EIICafZm/mbnXg:OxrhxBAGZji6IdThnRTXg
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

476288

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

4.8MB

Virtual Size

4.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.4MB

Virtual Size

4.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

468KB

Virtual Size

798KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

111KB

Virtual Size

111KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

68KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

eb69219e7087d2cde2b4d5fc8f5916e6da4c8ded26d596225c9ffdb6432afe7c

kernel32

generic