skuld | c23c6c67901468d041cbeb721627dbbc4a1974d6e6ee42a9a3d687ccc1188810 | Triage

Sharing

General

Target

2025-02-17_05e7da3ef1577910dc61a11632e6c8e2_frostygoop_luca-stealer_ngrbot_poet-rat_snatch
Size

10.3MB
Sample

250217-sv1bbazncp
MD5

05e7da3ef1577910dc61a11632e6c8e2
SHA1

3e287deba1aad8239a44b6c61c9d8eb5759b211e
SHA256

c23c6c67901468d041cbeb721627dbbc4a1974d6e6ee42a9a3d687ccc1188810
SHA512

42615364144933fe5baacb79bb8a06dc23afad4f502fa4f62824e0342a35216fb081884545a98eded8048491de44b959756bad481673413b48fe034b1bb2d133
SSDEEP

98304:XZ8eBWxO4ujDCTy/8AMujK5I2aFA0rNlHE67:X8OrDCVujK5I23uk67

Score

10^/10

skuld discovery persistence

Malware Config

Targets

- Target
  
  2025-02-17_05e7da3ef1577910dc61a11632e6c8e2_frostygoop_luca-stealer_ngrbot_poet-rat_snatch
- Size
  
  10.3MB
- MD5
  
  05e7da3ef1577910dc61a11632e6c8e2
- SHA1
  
  3e287deba1aad8239a44b6c61c9d8eb5759b211e
- SHA256
  
  c23c6c67901468d041cbeb721627dbbc4a1974d6e6ee42a9a3d687ccc1188810
- SHA512
  
  42615364144933fe5baacb79bb8a06dc23afad4f502fa4f62824e0342a35216fb081884545a98eded8048491de44b959756bad481673413b48fe034b1bb2d133
- SSDEEP
  
  98304:XZ8eBWxO4ujDCTy/8AMujK5I2aFA0rNlHE67:X8OrDCVujK5I23uk67
Score

8^/10

discovery persistence
- Downloads MZ/PE file
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence