General

  • Target

    temp.exe

  • Size

    9.9MB

  • MD5

    b1f33d16d597a50dde2e35a12ffa0701

  • SHA1

    0ad1db297684404228503399b55cdc2426622e7a

  • SHA256

    30c03e81698be9142d4cb187ac987e6a93b49bb8d9c171e84d09056a6ca40417

  • SHA512

    29d0ff33637e541894e975a1efb5dd1df84bb2b529367299d560e01630c8a795ad7706e79c3a723d46216a18b8cb228f16178ad7e4c7990f29ee9599381cae51

  • SSDEEP

    98304:w/Rf5+hDxzHXkn7veXYxns9PhJFmELWGgbZmU7zg:w/qhDxz3kaIns9PzFDChz

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1322351361119223888/scjrfnBelA3CHVyP-UCE2RDtX1sv1JqXUkufCoxGEw-xvr9CfyhxWNH0hwUwEIs7qH8i

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • temp.exe
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections