Extracted

• • Target

    slinky/slinky.exe

  • Size

    14.8MB

  • MD5

    a15f639ad6f334ddccacb2ecbd03fe19

  • SHA1

    4f7cf4a736b994d00d916a8572dbac8dd02f0652

  • SHA256

    46b69ba1e32ea096b56139e74e865e187647885edd9c5e9f5643969f81d7fd38

  • SHA512

    2e5290b7a0722f09c60f537d8b60032c881c614eb1e3b85cc4c9043d29cebfb983880e00e8bb32e6d9c31e88eaed87732872730ba4d39c12c74d2a79a2cf9e8f

  • SSDEEP

    196608:sqZ4f/oCqKqc/3h4Po9LXx+29GAB7ob73mrVGwYdNE2vfUW:/Z4XoBKHL9AuM73gQDvfUW

  Score

  10^/10

  skuldpersistencestealer

  • Skuld family

    skuld

  • Skuld stealer

    An info stealer written in Go lang.

    stealerskuld

  • Adds Run key to start application

    persistence

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1

• • Target

    slinky/slinky_library.dll

  • Size

    11.7MB

  • MD5

    f4f7eacab208d7b50d50f196bd3facd2

  • SHA1

    82ca056ecb89d1612df069a42952e077f7e079e1

  • SHA256

    4f35cfe4d051d56cc22dc2743024ffa0f3b4ee906b34c4336c72d71bc55de708

  • SHA512

    9b61bd125e066df121186057bcb163bfb3d8fb9ff3447963df0e9b14ab57fdf6a8d1faf61a5e75dc3e53425f541bb624b9d8b787e322ea6b675489d532b8f001

  • SSDEEP

    3:WAYJYJYJYJYJYJYJYJYJYJYJYJYJYJYJYJYJYJYJYJYJYJYJYJYJYJYJYJYJYJYw:z

  Score

  8^/10

  discovery

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral2

• • Target

    slinky/slinkyhook.dll

  • Size

    228KB

  • MD5

    6d8c17c67970cb5841811eed8adffffc

  • SHA1

    c869ab32318a035e51aff8e5e11b4cd25fb52a4f

  • SHA256

    7c4234fac3b6b3e96dace1e71c7a952ec67e3839f90f7a88a9ea283bf88d25b8

  • SHA512

    7d2a0ffcd72c8bf4a96b2ed722d7119749ec14f5d7e6a601cb6ae4a5b1c4a652b694158f01da340e3ca4751cabd0a56c42bf739d8b421e36937f3691b3b80c72

  • SSDEEP

    3072:hXxN1I6PgabbAzVxPLI5oIa5amK/1o4ptgELHY1lNyc+m+e7P26g66OVuknsDe0u:hhN1GFZq/15tFc+m97ieuknsDu

  Score

  1^/10
  behavioral3