General

  • Target

    1d7166f1cb758d252af9904e32bd128df4a9b4292ca2d162a611eff35eabe8f7N.exe

  • Size

    3.3MB

  • Sample

    250122-ay84hszldl

  • MD5

    2f0fcaa5e89062a81b58c83b674a64c0

  • SHA1

    13e33c1618c51ed9b1addb7f44b3b65879862545

  • SHA256

    1d7166f1cb758d252af9904e32bd128df4a9b4292ca2d162a611eff35eabe8f7

  • SHA512

    d5f13e8501fa2debed15854fa49cc901d33f5c53291a1c09901260f4ad23c7fbc4fa6bbba1fea52f347bf4e337455ddf7dc65b400309612e9abae4c1bbe56557

  • SSDEEP

    98304:/9JzAeYfc6nrsoXGOOmjwj7ag+KFDgKcE4cxFub:/TzxSAoXGlD7pNDgWxYb

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1328819841737691156/GQdbtF6NI_oe0OnUTJWsjVTdzNbgAZYn13jZrPxtL_1Auu1nh-mM1mLtqtoNq50gPvUV

Targets

    • Target

      1d7166f1cb758d252af9904e32bd128df4a9b4292ca2d162a611eff35eabe8f7N.exe

    • Size

      3.3MB

    • MD5

      2f0fcaa5e89062a81b58c83b674a64c0

    • SHA1

      13e33c1618c51ed9b1addb7f44b3b65879862545

    • SHA256

      1d7166f1cb758d252af9904e32bd128df4a9b4292ca2d162a611eff35eabe8f7

    • SHA512

      d5f13e8501fa2debed15854fa49cc901d33f5c53291a1c09901260f4ad23c7fbc4fa6bbba1fea52f347bf4e337455ddf7dc65b400309612e9abae4c1bbe56557

    • SSDEEP

      98304:/9JzAeYfc6nrsoXGOOmjwj7ag+KFDgKcE4cxFub:/TzxSAoXGlD7pNDgWxYb

    • Skuld family

    • Skuld stealer

      An info stealer written in Go lang.

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks