Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

50KfF6O.exe

windows10-ltsc_2021-x64

10

50KfF6O.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    50KfF6O.exe

  • Size

    3.2MB

  • Sample

    250322-p3a5lssyev

  • MD5

    9ec5cf784ec23ca09c2921668912cfeb

  • SHA1

    4b9c8b0d197c359368164e5738b44a65fba40741

  • SHA256

    56bd8367607b32bfe275478f96bbd0fe213c07eee696e0a268f817ea757a9543

  • SHA512

    043d623ae8f3dbb43b504ba08d916f27f9054c4df46c6b5d0ae56e98c44b919e8d9a05e333c08adad286353bf5f6f1b75c1ee23f819462654c94e1542c31c464

  • SSDEEP

    98304:f3bOTeskaH0XNniR5aAebmGeCpmC7ir4:/bOT1kaHeaGe87

Score
10/10
skuldpersistencestealerupx

Malware Config

Extracted

Family

skuld

C2

https://discordapp.com/api/webhooks/1349647136895012916/qSys_fpsL_y7usKH_AyrFupSjzSsVfg2t895g2HV8Yz72asrwCIsHaqqhPtDFjz8g8_E

Targets

    • Target

      50KfF6O.exe

    • Size

      3.2MB

    • MD5

      9ec5cf784ec23ca09c2921668912cfeb

    • SHA1

      4b9c8b0d197c359368164e5738b44a65fba40741

    • SHA256

      56bd8367607b32bfe275478f96bbd0fe213c07eee696e0a268f817ea757a9543

    • SHA512

      043d623ae8f3dbb43b504ba08d916f27f9054c4df46c6b5d0ae56e98c44b919e8d9a05e333c08adad286353bf5f6f1b75c1ee23f819462654c94e1542c31c464

    • SSDEEP

      98304:f3bOTeskaH0XNniR5aAebmGeCpmC7ir4:/bOT1kaHeaGe87

    Score
    10/10
    skuldpersistencestealerupx

    • Skuld family

      skuld

    • Skuld stealer

      An info stealer written in Go lang.

      stealerskuld

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks