General

  • Target

    Scarlet - Leaked.zip

  • Size

    870.2MB

  • MD5

    a3b5feef02115678f978db7554c7f31d

  • SHA1

    ff33112cea6b9b07978ff6cc0110bcabf87a119a

  • SHA256

    4e01f67d085ba2a7adf841ddd17abd8a315589084b08f57aa38f2d94fad2f096

  • SHA512

    2f542536c63d39aa91fcd9a3551c8c35fa353527c3b2b92bbe03f317cc4cd59468f3dab08d07b3accf3d462113ff6978cc2c20a47d921cc131a280ba60b0d9ef

  • SSDEEP

    25165824:sjgRGxSjypuk9ED+LeElqRwAbtbwxW6pbG:sjmGxE2h9i+BlquA5eWH

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1239728722446127235/CpLJBY80lsrvoWdpGjb7u3dhcW1liVDmy8--92GwopK7rc1uao8ShPq737KOZB0mDKuj

https://discord.com/api/webhooks/1239446722099286036/03iTGgnO1RXQSJpzERDxtEJ1DFuminwxIxeZh8ICScbvQq6rVvo6IKfigRDYRYMvbGSj

Signatures

  • Skuld family
  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Scarlet - Leaked.zip
    .zip

    Password: infected

  • Scarlet - Leaked/1 (1).JPG
    .jpg

    Password: infected

  • Scarlet - Leaked/1 (2).JPG
    .jpg

    Password: infected

  • Scarlet - Leaked/1 (3).exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections

  • Scarlet - Leaked/Leaked by Bm666 (1).JPG
    .jpg

    Password: infected

  • Scarlet - Leaked/Leaked by Bm666 (10).JPG
    .jpg

    Password: infected

  • Scarlet - Leaked/Leaked by Bm666 (11).JPG
    .jpg

    Password: infected

  • Scarlet - Leaked/Leaked by Bm666 (12).JPG
    .jpg

    Password: infected

  • Scarlet - Leaked/Leaked by Bm666 (13).JPG
    .jpg

    Password: infected

  • Scarlet - Leaked/Leaked by Bm666 (14).JPG
    .jpg
  • Scarlet - Leaked/Leaked by Bm666 (15).JPG
    .jpg
  • Scarlet - Leaked/Leaked by Bm666 (2).JPG
    .jpg
  • Scarlet - Leaked/Leaked by Bm666 (3).JPG
    .jpg
  • Scarlet - Leaked/Leaked by Bm666 (4).JPG
    .jpg
  • Scarlet - Leaked/Leaked by Bm666 (5).JPG
    .jpg
  • Scarlet - Leaked/Leaked by Bm666 (6).JPG
    .jpg
  • Scarlet - Leaked/Leaked by Bm666 (7).JPG
    .jpg
  • Scarlet - Leaked/Leaked by Bm666 (7.5).exe
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections

  • Scarlet - Leaked/Leaked by Bm666 (8).JPG
    .jpg
  • Scarlet - Leaked/Leaked by Bm666 (9).JPG
    .jpg
  • Scarlet - Leaked/Leaked by Bm666 .exe
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections

  • Scarlet - Leaked/Videos (4)/InShot_10190927_154545638.exe
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections

  • Scarlet - Leaked/Videos (4)/InShot_20190927_154545638.mp4
  • Scarlet - Leaked/Videos (4)/Outdoor show.MP4
  • Scarlet - Leaked/Videos (4)/Part 1.mov
  • Scarlet - Leaked/Videos (4)/Part 2.mov
  • Scarlet - Leaked/Videos (4)/Part 3.exe
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections