General

  • Target

    disctool3.exe

  • Size

    9.9MB

  • MD5

    047853ed8dd51e5c78bb9dfbd2092919

  • SHA1

    e1d8545afac09032921684c5213f228acdeee935

  • SHA256

    490c4334277eb8d189001b30ee07d5bb76cbf3e0a65b7cf0bbfab6dd2d3bf56c

  • SHA512

    deef953cd2800251eb1e2a54eb172f15b9a6661de6eb4cb60519e88767e2c643ecf616092cae65c2898819793b495c880dffedf20502dcffcbed060037bce353

  • SSDEEP

    98304:S1mlZn4ppvE5GOV+9Ux6lct0znJkEuWIglZmnz:S17ppvQihlct0DJdh8z

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1327724786805112892/s2XypNsFCL8hyIIL_X38703UYXl8BfD0weZ-NwcGfI2jq8YtBWBnMaOWiX1SPNAaqslR

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • disctool3.exe
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections