Overview

overview

10

Static

static

10

skuld.zip

windows10-ltsc 2021-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    skuld.zip

  • Size

    5.4MB

  • MD5

    fff6c5ece2890b0f594d5899b9f4f471

  • SHA1

    a5210063b9e25bd2dbcdfa22c136e70602a6870c

  • SHA256

    e64a30897bb90af9fc7ee9299602ccacf3d5dba1f7351449df4ed4613a6d76f7

  • SHA512

    9af5255ae9097d8b8e31a3567502c167182dd1a2eab9f3ab3e02064a86a7efdd9928b17e895b3200330ca00fbd921656a990b5ba922c22b6ac55858bd6884608

  • SSDEEP

    98304:zeEoI3Hv+sNewuoRj5l5erorcM7/tlFxFLvC1jPQHUNV44+Hvf5Vgn3bdHG2iDau:iEv3HmsNewuoRllUUcCj7FzObwJgLdHq

Score
10/10
skuld

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1329283868187955230/LgZapkixJUPQm97M9Zx6i7MBYSFFkAdzQLUfL6pGmsN5hc1f7Hlnnd9d4niixsRmbB1y

Signatures

  • Skuld family
    skuld
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • skuld.zip
    .zip
  • skuld/.git/HEAD
  • skuld/.git/config
  • skuld/.git/description
  • skuld/.git/hooks/applypatch-msg.sample
    .sh linux
  • skuld/.git/hooks/commit-msg.sample
    .sh linux
  • skuld/.git/hooks/fsmonitor-watchman.sample
    .sh linux
  • skuld/.git/hooks/post-update.sample
    .sh linux
  • skuld/.git/hooks/pre-applypatch.sample
    .sh linux
  • skuld/.git/hooks/pre-commit.sample
    .sh linux
  • skuld/.git/hooks/pre-merge-commit.sample
    .sh linux
  • skuld/.git/hooks/pre-push.sample
    .sh linux
  • skuld/.git/hooks/pre-rebase.sample
    .sh linux
  • skuld/.git/hooks/pre-receive.sample
    .sh linux
  • skuld/.git/hooks/prepare-commit-msg.sample
    .sh linux
  • skuld/.git/hooks/push-to-checkout.sample
    .sh linux
  • skuld/.git/hooks/sendemail-validate.sample
    .sh linux
  • skuld/.git/hooks/update.sample
    .sh linux
  • skuld/.git/index
  • skuld/.git/info/exclude
  • skuld/.git/logs/HEAD
  • skuld/.git/logs/refs/heads/main
  • skuld/.git/logs/refs/remotes/origin/HEAD
  • skuld/.git/objects/pack/pack-0131c5f600b5bc457578c64e3642f418889eec38.idx
  • skuld/.git/objects/pack/pack-0131c5f600b5bc457578c64e3642f418889eec38.pack
  • skuld/.git/objects/pack/pack-0131c5f600b5bc457578c64e3642f418889eec38.rev
  • skuld/.git/packed-refs
  • skuld/.git/refs/heads/main
  • skuld/.git/refs/remotes/origin/HEAD
  • skuld/.gitattributes
  • skuld/.github/ISSUE_TEMPLATE/bug_report.md
  • skuld/.github/ISSUE_TEMPLATE/feature_request.md
  • skuld/.github/assets/avatar.png
    .png
  • skuld/.github/assets/browsers.png
    .png
  • skuld/.github/assets/codes.png
    .png
  • skuld/.github/assets/config.png
    .png
  • skuld/.github/assets/discodes.png
    .png
  • skuld/.github/assets/games.png
    .png
  • skuld/.github/assets/kofi.png
    .png
  • skuld/.github/assets/system.png
    .png
  • skuld/.github/assets/token.png
    .png
  • skuld/.github/assets/wallets.png
    .png
  • skuld/.github/assets/walletsinjection.png
    .png
  • skuld/.github/pull_request_template.md
  • skuld/.gitignore
  • skuld/CONTRIBUTING.md
  • skuld/LICENSE
  • skuld/README.md
  • skuld/go.mod
  • skuld/go.sum
  • skuld/main.go
  • skuld/modules/antidebug/antidebug.go
  • skuld/modules/antivirus/antivirus.go
  • skuld/modules/antivm/antivm.go
  • skuld/modules/browsers/browsers.go
  • skuld/modules/browsers/conn.go
  • skuld/modules/browsers/cookies.go
  • skuld/modules/browsers/creditcard.go
  • skuld/modules/browsers/crypto.go
  • skuld/modules/browsers/decrypt.go
  • skuld/modules/browsers/downloads.go
  • skuld/modules/browsers/history.go
  • skuld/modules/browsers/logins.go
  • skuld/modules/browsers/masterkey.go
    .js
  • skuld/modules/browsers/paths.go
  • skuld/modules/browsers/structs.go
  • skuld/modules/clipper/clipper.go
    .js
  • skuld/modules/commonfiles/commonfiles.go
    .js
  • skuld/modules/discodes/discodes.go
  • skuld/modules/discordinjection/injection.go
  • skuld/modules/fakeerror/fakeerror.go
    .js
  • skuld/modules/games/games.go
  • skuld/modules/hideconsole/hideconsole.go
  • skuld/modules/startup/startup.go
  • skuld/modules/system/system.go
    .js
  • skuld/modules/tokens/structs.go
  • skuld/modules/tokens/tokens.go
  • skuld/modules/uacbypass/bypass.go
  • skuld/modules/wallets/wallets.go
  • skuld/modules/walletsinjection/walletsinjection.go
  • skuld/skuld.exe
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections

  • skuld/utils/fileutil/fileutil.go
  • skuld/utils/hardware/hardware.go
  • skuld/utils/program/program.go
  • skuld/utils/requests/requests.go