General

  • Target

    slinky.rar

  • Size

    26.7MB

  • MD5

    cbf141f5b4df8c38f679ac49bb8bde92

  • SHA1

    872a4e455805be20ca477b3c58d249870ed7b98e

  • SHA256

    89897dd0a4e265ae460b7c94d65188da8d49efb5cbd84613e513f99248379cb2

  • SHA512

    c96f87f450a1c2dd6f67fe516b74d189e172c7f3cb91edd8e4fc395aa7f7e8afb738fe10e0413a56b6df49ac0af8709833ac3e9453594103a401d887c2e712a1

  • SSDEEP

    786432:wgVeL/oMJ6HkqFVc0G2Rzt9zWnioO7NLyDI:3QEcq/CWt9WCsI

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://ptb.discord.com/api/webhooks/1349978237123563552/9Z3tmeBDcx9gPVX1aoZkc47djylgCmPQ5oDmd4u78KdGgJx21nF4_I5dTUu_5OgY18YA

Signatures

  • Skuld family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • slinky.rar
    .rar

    Password: slinky

  • slinky/slinky.exe
    .exe windows:6 windows x64 arch:x64

    Password: slinky

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections

  • slinky/slinky_library.dll
  • slinky/slinkyhook.dll
    .dll windows:6 windows x64 arch:x64

    Password: slinky

    fea4322ee6bcc5ab3c037ce7e50d99de


    Headers

    Imports

    Exports

    Sections