General

  • Target

    b0985727eb488e671fbbdd39fcf8519b3b3fddf8fe5ea648f2474bf245d49dcc.exe

  • Size

    3.8MB

  • Sample

    241226-v5cdcasmgx

  • MD5

    bf98c4097d3007739050771f898a479f

  • SHA1

    27dc56615a9641d97f380bfda704c20b9eb58000

  • SHA256

    b0985727eb488e671fbbdd39fcf8519b3b3fddf8fe5ea648f2474bf245d49dcc

  • SHA512

    4a93a7694b4072a3b65b694ff1cdaaccf0250004e678b6ca06f85799750a39823013672ec65d39b30e5f638dcfa4cf8459766896f585cd2499308c7d50ad9a6d

  • SSDEEP

    98304:wBY5QBeOT3uY2f2HsjkmNF4s0+wzo22A66bpb0C8mvYvGBkbI:wm5MXPmN17WYKpVhQ/c

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1319769084723724329/0MTnaymIeCHurp0VMDTAOx0iXguX5iiX0hLraxSpl4htUXblPfXoUXl-qUK5q0g8EZ4w

Targets

    • Target

      b0985727eb488e671fbbdd39fcf8519b3b3fddf8fe5ea648f2474bf245d49dcc.exe

    • Size

      3.8MB

    • MD5

      bf98c4097d3007739050771f898a479f

    • SHA1

      27dc56615a9641d97f380bfda704c20b9eb58000

    • SHA256

      b0985727eb488e671fbbdd39fcf8519b3b3fddf8fe5ea648f2474bf245d49dcc

    • SHA512

      4a93a7694b4072a3b65b694ff1cdaaccf0250004e678b6ca06f85799750a39823013672ec65d39b30e5f638dcfa4cf8459766896f585cd2499308c7d50ad9a6d

    • SSDEEP

      98304:wBY5QBeOT3uY2f2HsjkmNF4s0+wzo22A66bpb0C8mvYvGBkbI:wm5MXPmN17WYKpVhQ/c

    • Skuld family

    • Skuld stealer

      An info stealer written in Go lang.

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks