General

  • Target

    registry.npmjs.org_scriptconfig_1.0.0.sh

  • Size

    316B

  • Sample

    250225-m8hqjavkz2

  • MD5

    e0314ec8841c5d8cefee66d5a74e8c93

  • SHA1

    279a9e341f51002b8a9ec8c33440ee71bbcb9d25

  • SHA256

    852de85a8cf372a74b6b8d7506a77d54c168c6069a924ed870b097f0dd9a613e

  • SHA512

    b92d257f1c6e51dc4b5ad67d419c29f7100dc72f7577682c20c29756625e424cbea0ff45e7b0b0a14aa8cb95447d690019e8609b11eb8ac5b48ab7d5c5e59d39

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1331744236357423134/efaEMgi2R3lvcU9oayejhDUPtWPPDHXVeUtvRfvCW_F2tCboRRtNPiBitNyPnGjVoGnf

Targets

    • Target

      registry.npmjs.org_scriptconfig_1.0.0.sh

    • Size

      316B

    • MD5

      e0314ec8841c5d8cefee66d5a74e8c93

    • SHA1

      279a9e341f51002b8a9ec8c33440ee71bbcb9d25

    • SHA256

      852de85a8cf372a74b6b8d7506a77d54c168c6069a924ed870b097f0dd9a613e

    • SHA512

      b92d257f1c6e51dc4b5ad67d419c29f7100dc72f7577682c20c29756625e424cbea0ff45e7b0b0a14aa8cb95447d690019e8609b11eb8ac5b48ab7d5c5e59d39

    • Skuld family

    • Skuld stealer

      An info stealer written in Go lang.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks