Extracted

• • Target

    2024-11-11_a691ba7f875f03ec2aaebd23855e854b_frostygoop_luca-stealer_poet-rat_snatch

  • Size

    14.8MB

  • MD5

    a691ba7f875f03ec2aaebd23855e854b

  • SHA1

    4423cb8e7060e8735e9dad6168c999a6bbeeb864

  • SHA256

    fb6f32fa33d8459cc43bd0bd1f69ff9f3a55832c136988a9cebcd0da512e7f93

  • SHA512

    e9cc0a87520484d114bb832d560b11accb1b6d18d7300fc11f37989ed3c2dfee111a6a2c00d66de8f93b94fec25ee94b32424af076d6e1d6590feb655c88f1b7

  • SSDEEP

    196608:lYk3cFycRRLYWGOzK2B+cbg8lhSLPb1z/DD40BZNL:lYfFzPtg87ARz/b7

  Score

  10^/10

  skuldpersistencestealer

  • Skuld family

    skuld

  • Skuld stealer

    An info stealer written in Go lang.

    stealerskuld

  • Adds Run key to start application

    persistence

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2