General

  • Target

    hilolxdbyelol.exe

  • Size

    3.2MB

  • Sample

    241110-msskssykbn

  • MD5

    201b62987a6448b1ed7d4c7c634e4401

  • SHA1

    3f9f029737bc56e4a23b8a64d6603856b3c16f0a

  • SHA256

    2f0a0e4dff70b193c9f6766675be03126bcf1c796781d04714ccb5443942afd9

  • SHA512

    decd1598075057f25db2d8e719917622d6b7dffd24529b9aba60952d8768d4e159e48aa91fba46c44e8c38c5aa37240b7f489dac5a10ba0740a7b44f009367cb

  • SSDEEP

    49152:sZIS5uiyrDVujrZ7Ja+OMDQAf5rIQUlIne5fMlg7l3VzIlXs+FMOiJCxu499:ep5arDwdjOMQAf53emlgp39GXFFMq

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1305119518217211957/zCd3-6tFpgrOizgbucdSd1OdGvsc8EMAAVbe5qCBCGgMhVWFRPLgQcy2BWXTkeFrj4iQ

Targets

    • Target

      hilolxdbyelol.exe

    • Size

      3.2MB

    • MD5

      201b62987a6448b1ed7d4c7c634e4401

    • SHA1

      3f9f029737bc56e4a23b8a64d6603856b3c16f0a

    • SHA256

      2f0a0e4dff70b193c9f6766675be03126bcf1c796781d04714ccb5443942afd9

    • SHA512

      decd1598075057f25db2d8e719917622d6b7dffd24529b9aba60952d8768d4e159e48aa91fba46c44e8c38c5aa37240b7f489dac5a10ba0740a7b44f009367cb

    • SSDEEP

      49152:sZIS5uiyrDVujrZ7Ja+OMDQAf5rIQUlIne5fMlg7l3VzIlXs+FMOiJCxu499:ep5arDwdjOMQAf53emlgp39GXFFMq

    • Skuld family

    • Skuld stealer

      An info stealer written in Go lang.

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks