General

  • Target

    slinky.rar

  • Size

    26.7MB

  • MD5

    cc87cf7fe022949064c61decdb8fcd25

  • SHA1

    fde0a4ea608d00230450c9f5704803c25d98f5f1

  • SHA256

    4fe9951b93bfa62a0ce8358a3710bfe4a0695b6d86337c0cccb7aa5739d55e9f

  • SHA512

    1b8264011b4b815b4d703ef0cc7b4dc51328bf2a5efe60012888431eb36358c1f4996971a0e56fad0081ed1e6dda7975d56b049a9e705b158bbb1a1cb0607eac

  • SSDEEP

    393216:PVpYSceIQWPv7PKwveKqNHOcdSkHR63ScI7wLGPZ2rLT4IujYwt2hIVkg:t9cesTYKq3dS4Ag7wqPZIRuv2hqt

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://ptb.discord.com/api/webhooks/1319318023546605670/8ICysG66W95LxC31v7Jh-RVSBgvIpQY7Xb_8zqo6013-KvzBx9wq-Tjf62q_WPmoxEeQ

Signatures

  • Skuld family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • slinky.rar
    .rar

    Password: slinky

  • slinky/slinky.exe
    .exe windows:6 windows x64 arch:x64

    Password: slinky

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections

  • slinky/slinky_library.dll
  • slinky/slinkyhook.dll
    .dll windows:6 windows x64 arch:x64

    Password: slinky

    fea4322ee6bcc5ab3c037ce7e50d99de


    Headers

    Imports

    Exports

    Sections