General

  • Target

    malw.zip

  • Size

    4.0MB

  • MD5

    b5c4cab36c102992c9ccf6fd7bc6b670

  • SHA1

    b08a841b4dc8b4ca32aa0d6341e64b376aa73898

  • SHA256

    4e90ecd2cd56ee99511c63b870a8c9b613a63f87dbfb08bef90fd55cf3d81475

  • SHA512

    127f4c6b68800fb0844581bb442e7cd606e8954253151922439eabd03973c33d943cf7fe7c5bc055d5b74ccf867eade313773a4f46fed6abcd39a16ba4459db5

  • SSDEEP

    98304:cZVnmy9zGNaPnitRkQNO1+vZbtEQi4vz+ripvfmrOJYKgvh:2gmGNdRkQ0QvZb+kf+SJIh

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1285808008127053927/bnNxBQO1Briav8yFpyPkDylQRl3agJyrCHMbWTiXHOKqC8ls42WjuC8zOyowOhBS19nF

Signatures

  • Skuld family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • malw.zip
    .zip
  • malw.exe
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections