Overview

overview

10

Static

static

10

2025-04-14...ch.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    106s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/04/2025, 16:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2025-04-14_cf8dc4367be0aba84c24f7f2d43679be_luca-stealer_ngrbot_poet-rat_snatch.exe

  • Size

    15.0MB

  • MD5

    cf8dc4367be0aba84c24f7f2d43679be

  • SHA1

    04e42ba38e73d1287dfa8b64d05c0ef61ac1f084

  • SHA256

    d27a2029f437560c94168cb2f68515f47bd8020bd7340b7c2dc36bca815a4ae3

  • SHA512

    b36812e94f4724694a81e4eaf5471dd482c590a9b752bb41b80401c8c821b3ca97e61ec0681240b6d3c1a4a9417199da9fc45d301b84b83862094cea23937a64

  • SSDEEP

    196608:SE63/+0UJ3fBnnd26Aa+3Fky+nBV1V8+58X8UDcAaqe0cc:TW/7UF2c+3FP+RVhuXXEc

Score
10/10
skuldstealerupx

Malware Config

Signatures

  • Skuld family
    skuld
  • Skuld stealer

    An info stealer written in Go lang.

    stealerskuld
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\2025-04-14_cf8dc4367be0aba84c24f7f2d43679be_luca-stealer_ngrbot_poet-rat_snatch.exe
    "C:\Users\Admin\AppData\Local\Temp\2025-04-14_cf8dc4367be0aba84c24f7f2d43679be_luca-stealer_ngrbot_poet-rat_snatch.exe"
    1⤵
      PID:2788

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2788-0-0x0000000000340000-0x0000000001248000-memory.dmp

      Filesize

      15.0MB

      Download