General
-
Target
temp.exe
-
Size
9.9MB
-
Sample
250122-xbqd8azrbq
-
MD5
b1f33d16d597a50dde2e35a12ffa0701
-
SHA1
0ad1db297684404228503399b55cdc2426622e7a
-
SHA256
30c03e81698be9142d4cb187ac987e6a93b49bb8d9c171e84d09056a6ca40417
-
SHA512
29d0ff33637e541894e975a1efb5dd1df84bb2b529367299d560e01630c8a795ad7706e79c3a723d46216a18b8cb228f16178ad7e4c7990f29ee9599381cae51
-
SSDEEP
98304:w/Rf5+hDxzHXkn7veXYxns9PhJFmELWGgbZmU7zg:w/qhDxz3kaIns9PzFDChz
Behavioral task
behavioral1
Sample
temp.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
temp.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
skuld
https://discord.com/api/webhooks/1322351361119223888/scjrfnBelA3CHVyP-UCE2RDtX1sv1JqXUkufCoxGEw-xvr9CfyhxWNH0hwUwEIs7qH8i
Targets
-
-
Target
temp.exe
-
Size
9.9MB
-
MD5
b1f33d16d597a50dde2e35a12ffa0701
-
SHA1
0ad1db297684404228503399b55cdc2426622e7a
-
SHA256
30c03e81698be9142d4cb187ac987e6a93b49bb8d9c171e84d09056a6ca40417
-
SHA512
29d0ff33637e541894e975a1efb5dd1df84bb2b529367299d560e01630c8a795ad7706e79c3a723d46216a18b8cb228f16178ad7e4c7990f29ee9599381cae51
-
SSDEEP
98304:w/Rf5+hDxzHXkn7veXYxns9PhJFmELWGgbZmU7zg:w/qhDxz3kaIns9PzFDChz
Score6/10-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1