General

  • Target

    NеwInstUI 1.0.9.exe

  • Size

    9.9MB

  • MD5

    62f23a49b2b87a4d2697d550105cb153

  • SHA1

    d764b4582630f08840fc1ee67207c619d39e88fe

  • SHA256

    7fc723f2bd73cf74da0c9854facec62252e88dac65ae6284346601e3828d6af8

  • SHA512

    4c0d9fd29dffd8fa9958e5a85a5472be89422da67b34a3af22ece31418d1f0f7d52ff659aca8ae5f3bcd054c314b8b0d23f4978dcc7b4afe5ca4c48cc99fbd85

  • SSDEEP

    98304:HF9Vr/ReuOMz7coL2s+FaDsH0mA7vECWGgbZmYkzA:HFT0uOMnckjDsH0N7s9uz

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1315439489920925776/e-NSdJ6pSCyW1svvKGpZibD9wElwWR1x9EWA9gsZ7Ah_Ic60O2cw6o7Ic93MbP9dVHDH

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NеwInstUI 1.0.9.exe
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections