Overview

overview

10

Static

static

3

2025-04-17...ch.exe

windows10-2004-x64

10

2025-04-17...ch.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-17_d9aee7cf0002606edf948d6b38c357e7_frostygoop_knight_luca-stealer_ngrbot_poet-rat_sliver_snatch

  • Size

    10.3MB

  • Sample

    250417-3ygcqaxry3

  • MD5

    d9aee7cf0002606edf948d6b38c357e7

  • SHA1

    eae81579f6057c1f016a61932c64e90d3813a1e9

  • SHA256

    ed04e4a49975567e121f24d5727ae26bd04c30ab4d9a99897f84b3a87cf9b40e

  • SHA512

    2f2c978e28595dd07e94a32521897f1b144fce12be3e5386e513d8bb7c99e2a82bfeb5d7af40d43cd96b88018b3a1d069cf1a3c3051f367e1165a4f2048d82be

  • SSDEEP

    98304:QVghEwZ0/kg7oWvjfx/OdWcA0rU0UhkE1bl:QuhEU0/Bjfx/OdWHLd1bl

Score
10/10
skuldpersistencestealer

Malware Config

Targets

    • Target

      2025-04-17_d9aee7cf0002606edf948d6b38c357e7_frostygoop_knight_luca-stealer_ngrbot_poet-rat_sliver_snatch

    • Size

      10.3MB

    • MD5

      d9aee7cf0002606edf948d6b38c357e7

    • SHA1

      eae81579f6057c1f016a61932c64e90d3813a1e9

    • SHA256

      ed04e4a49975567e121f24d5727ae26bd04c30ab4d9a99897f84b3a87cf9b40e

    • SHA512

      2f2c978e28595dd07e94a32521897f1b144fce12be3e5386e513d8bb7c99e2a82bfeb5d7af40d43cd96b88018b3a1d069cf1a3c3051f367e1165a4f2048d82be

    • SSDEEP

      98304:QVghEwZ0/kg7oWvjfx/OdWcA0rU0UhkE1bl:QuhEU0/Bjfx/OdWHLd1bl

    Score
    10/10
    skuldpersistencestealer

    • Skuld family

      skuld

    • Skuld stealer

      An info stealer written in Go lang.

      stealerskuld

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks