General

  • Target

    OnlineFix64.dll

  • Size

    9.9MB

  • Sample

    250111-w626tsykeq

  • MD5

    42a032c968e9d0c145bf1bfc3b534a26

  • SHA1

    6907806bd435475f10b285b076888dcd92554689

  • SHA256

    fda7a9e6f445b18f4a8de9a0529188e3e486d0e8844f892a72b730973a63fa6a

  • SHA512

    5ba0f0262cfb36d95d9abb8316b75b0f10cd8667c57a03fcaa4d5ebec857474fad4f3db886cbd1482bb728aef405f7796b040d9a48d6c415e37f9e685d4385ec

  • SSDEEP

    98304:UXv9Q2/1jxJ4xlxSaHL8SLs50SJStEcWGgbZmYOzK:UX79jxJml57Ls50US+H4z

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1325153812511457281/SfiompCi9QEfMTUl7y9XuKGEoFi_Q0_rZgfEPMR4FO3uU2uFkexmnRS_cnTOsrLQ8DCQ

Targets

    • Target

      OnlineFix64.dll

    • Size

      9.9MB

    • MD5

      42a032c968e9d0c145bf1bfc3b534a26

    • SHA1

      6907806bd435475f10b285b076888dcd92554689

    • SHA256

      fda7a9e6f445b18f4a8de9a0529188e3e486d0e8844f892a72b730973a63fa6a

    • SHA512

      5ba0f0262cfb36d95d9abb8316b75b0f10cd8667c57a03fcaa4d5ebec857474fad4f3db886cbd1482bb728aef405f7796b040d9a48d6c415e37f9e685d4385ec

    • SSDEEP

      98304:UXv9Q2/1jxJ4xlxSaHL8SLs50SJStEcWGgbZmYOzK:UX79jxJml57Ls50US+H4z

    Score
    6/10
    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks