General

  • Target

    OnlineFix64.dll

  • Size

    9.9MB

  • MD5

    42a032c968e9d0c145bf1bfc3b534a26

  • SHA1

    6907806bd435475f10b285b076888dcd92554689

  • SHA256

    fda7a9e6f445b18f4a8de9a0529188e3e486d0e8844f892a72b730973a63fa6a

  • SHA512

    5ba0f0262cfb36d95d9abb8316b75b0f10cd8667c57a03fcaa4d5ebec857474fad4f3db886cbd1482bb728aef405f7796b040d9a48d6c415e37f9e685d4385ec

  • SSDEEP

    98304:UXv9Q2/1jxJ4xlxSaHL8SLs50SJStEcWGgbZmYOzK:UX79jxJml57Ls50US+H4z

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1325153812511457281/SfiompCi9QEfMTUl7y9XuKGEoFi_Q0_rZgfEPMR4FO3uU2uFkexmnRS_cnTOsrLQ8DCQ

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • OnlineFix64.dll
    .dll windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Exports

    Sections