General

  • Target

    BootStrapper (1)

  • Size

    3.2MB

  • Sample

    250117-zt59hasqdy

  • MD5

    0442d033d1e0b18c6dbf9e7f57039da5

  • SHA1

    ee9b1d948d6b3237f3a64cda561d0efaa2a4e164

  • SHA256

    16b9f580660a174e0d3f2b23cdf4de6fe82deefcd75192464bff2bd584a3c2b4

  • SHA512

    7f9afb2ed2a87a2bd690ec41dbb7f2e62bb0b6c789df59ed0610adbec88c96bd1418ef36a52d8d18d1d9d47ae98bd0871673879f186ca14190259f286d80ee0b

  • SSDEEP

    98304:lYsufBjM2jH5ayXnfvf1KXZFHwVExjMf/tLIMrTF:lYsGjL3NKXTH1VM+mF

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1329903513274155171/z1jphWz7v3gjJ0vhCWrkHcKKPLGjaxj55asRwGClmgW2MKIcHFdOmwUdV4yEr8m6I-my

Targets

    • Target

      BootStrapper (1)

    • Size

      3.2MB

    • MD5

      0442d033d1e0b18c6dbf9e7f57039da5

    • SHA1

      ee9b1d948d6b3237f3a64cda561d0efaa2a4e164

    • SHA256

      16b9f580660a174e0d3f2b23cdf4de6fe82deefcd75192464bff2bd584a3c2b4

    • SHA512

      7f9afb2ed2a87a2bd690ec41dbb7f2e62bb0b6c789df59ed0610adbec88c96bd1418ef36a52d8d18d1d9d47ae98bd0871673879f186ca14190259f286d80ee0b

    • SSDEEP

      98304:lYsufBjM2jH5ayXnfvf1KXZFHwVExjMf/tLIMrTF:lYsGjL3NKXTH1VM+mF

    • Skuld family

    • Skuld stealer

      An info stealer written in Go lang.

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks