Overview

overview

10

Static

static

10

skuld.zip

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    skuld.zip

  • Size

    5.4MB

  • MD5

    363efbb5f1afd8d510ff737e1f6eefd4

  • SHA1

    03d8c02b8006269b42d2835e00e243351ebab539

  • SHA256

    336e390d403f2c24a211e5bd1a7aa0b818f855a9f40c89dfd229da36f563978a

  • SHA512

    dd48ba87a69b7983d501aa1146f1cc949b5a8a150a0def2df0a3a5bc56a5324c0687aae637e6891e46bc621da15c67a0979fb0b8c90ad8ca63bf0ba7ccab3058

  • SSDEEP

    98304:dy+8x3jhktbwJBRj5l5erorcM7/tlFxFLvC1jPQvHZAC4USOpFmJ2UzgNYgfd:dl8x3jWtbwJBRllUUcCj7FzDAY7pFQzO

Score
10/10
skuld

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1329283868187955230/LgZapkixJUPQm97M9Zx6i7MBYSFFkAdzQLUfL6pGmsN5hc1f7Hlnnd9d4niixsRmbB1y

Signatures

  • Skuld family
    skuld
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • skuld.zip
    .zip
  • skuld/.git/HEAD
  • skuld/.git/config
  • skuld/.git/description
  • skuld/.git/hooks/applypatch-msg.sample
    .sh linux
  • skuld/.git/hooks/commit-msg.sample
    .sh linux
  • skuld/.git/hooks/fsmonitor-watchman.sample
    .sh linux
  • skuld/.git/hooks/post-update.sample
    .sh linux
  • skuld/.git/hooks/pre-applypatch.sample
    .sh linux
  • skuld/.git/hooks/pre-commit.sample
    .sh linux
  • skuld/.git/hooks/pre-merge-commit.sample
    .sh linux
  • skuld/.git/hooks/pre-push.sample
    .sh linux
  • skuld/.git/hooks/pre-rebase.sample
    .sh linux
  • skuld/.git/hooks/pre-receive.sample
    .sh linux
  • skuld/.git/hooks/prepare-commit-msg.sample
    .sh linux
  • skuld/.git/hooks/push-to-checkout.sample
    .sh linux
  • skuld/.git/hooks/sendemail-validate.sample
    .sh linux
  • skuld/.git/hooks/update.sample
    .sh linux
  • skuld/.git/index
  • skuld/.git/info/exclude
  • skuld/.git/logs/HEAD
  • skuld/.git/logs/refs/heads/main
  • skuld/.git/logs/refs/remotes/origin/HEAD
  • skuld/.git/objects/pack/pack-8f3acb74768ebae4a0238c0577df0aad9707f829.idx
  • skuld/.git/objects/pack/pack-8f3acb74768ebae4a0238c0577df0aad9707f829.pack
  • skuld/.git/objects/pack/pack-8f3acb74768ebae4a0238c0577df0aad9707f829.rev
  • skuld/.git/packed-refs
  • skuld/.git/refs/heads/main
  • skuld/.git/refs/remotes/origin/HEAD
  • skuld/.gitattributes
  • skuld/.github/ISSUE_TEMPLATE/bug_report.md
  • skuld/.github/ISSUE_TEMPLATE/feature_request.md
  • skuld/.github/assets/avatar.png
    .png
  • skuld/.github/assets/browsers.png
    .png
  • skuld/.github/assets/codes.png
    .png
  • skuld/.github/assets/config.png
    .png
  • skuld/.github/assets/discodes.png
    .png
  • skuld/.github/assets/games.png
    .png
  • skuld/.github/assets/kofi.png
    .png
  • skuld/.github/assets/system.png
    .png
  • skuld/.github/assets/token.png
    .png
  • skuld/.github/assets/wallets.png
    .png
  • skuld/.github/assets/walletsinjection.png
    .png
  • skuld/.github/pull_request_template.md
  • skuld/.gitignore
  • skuld/CONTRIBUTING.md
  • skuld/LICENSE
  • skuld/README.md
  • skuld/go.mod
  • skuld/go.sum
  • skuld/main.go
  • skuld/modules/antidebug/antidebug.go
  • skuld/modules/antivirus/antivirus.go
  • skuld/modules/antivm/antivm.go
  • skuld/modules/browsers/browsers.go
  • skuld/modules/browsers/conn.go
  • skuld/modules/browsers/cookies.go
  • skuld/modules/browsers/creditcard.go
  • skuld/modules/browsers/crypto.go
  • skuld/modules/browsers/decrypt.go
  • skuld/modules/browsers/downloads.go
  • skuld/modules/browsers/history.go
  • skuld/modules/browsers/logins.go
  • skuld/modules/browsers/masterkey.go
    .js
  • skuld/modules/browsers/paths.go
  • skuld/modules/browsers/structs.go
  • skuld/modules/clipper/clipper.go
    .js
  • skuld/modules/commonfiles/commonfiles.go
    .js
  • skuld/modules/discodes/discodes.go
  • skuld/modules/discordinjection/injection.go
  • skuld/modules/fakeerror/fakeerror.go
    .js
  • skuld/modules/games/games.go
  • skuld/modules/hideconsole/hideconsole.go
  • skuld/modules/startup/startup.go
  • skuld/modules/system/system.go
    .js
  • skuld/modules/tokens/structs.go
  • skuld/modules/tokens/tokens.go
  • skuld/modules/uacbypass/bypass.go
  • skuld/modules/wallets/wallets.go
  • skuld/modules/walletsinjection/walletsinjection.go
  • skuld/skuld.exe
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections

  • skuld/utils/fileutil/fileutil.go
  • skuld/utils/hardware/hardware.go
  • skuld/utils/program/program.go
  • skuld/utils/requests/requests.go