General

  • Target

    Boostrapper.exe

  • Size

    9.9MB

  • MD5

    3abeda4cfdea801529a07203d7a1549a

  • SHA1

    04bf6ea6dc8b5b6e52f5d91c619ef688ab4c7e01

  • SHA256

    f7f93e0658059d5943247448e402aa358a85c2e8e9993d577c5bcfee78c85644

  • SHA512

    487db1dd59bbb4a5a3df5856716d037e0ce27b861bd5a6ccd34faf1395d50bb633d917292fd79c5785fff92da13f863fda11feaa856adc2b63938f891cc3ab8c

  • SSDEEP

    98304:PXv9/2Q1axa4xlySaHL8SLs50SJeHEAWGgbZmYnzK:PXw+axaml47Ls50UekDFz

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discordapp.com/api/webhooks/1326412360210055218/QT9_XGXKvtacBhWzDAqa0ojb-uYPfXarORACcLhdJT12GlDkRPIyye51PVaU6FZTjJFk

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Boostrapper.exe
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections