General
- Target loader.exe
- Size 10.6MB
- Sample260717-1p2aesay2v
- SHA256 956b37d6355e021ca5d56318fb23aeaf77f28f9b3dec1ec08f497be95bd5dc35
- MD5 53c1a19174154036902713b8fd462c3b
- SHA1 3577f9edef7c4d76a6e083a5bd604e365ad49929
- SHA512 e10340bdc7cbfa1be37725cb0ba8d39bddc999cc46092404ffef95f6189d98b41e5326128c4619bae5a1b5ce8012db06418e3347fe24e92cac5f29e1dc75c3e0
- SSDEEP 98304:YSgV+Wz0H72Zr300yyVa+Ng+u8v90TfoGB7JmZbTlk1La7RM3cyQfWGWhcumAanB:Ylzz0HEro+NgJ8v90MGM+e/
- TLSH T1D1B64B57ECB941E4C5AED179C6269622BB713C884B3063D36B50FA242F37BD0AE79740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target loader.exe
- Size 10.6MB
- SHA256 956b37d6355e021ca5d56318fb23aeaf77f28f9b3dec1ec08f497be95bd5dc35
- MD5 53c1a19174154036902713b8fd462c3b
- SHA1 3577f9edef7c4d76a6e083a5bd604e365ad49929
- SHA512 e10340bdc7cbfa1be37725cb0ba8d39bddc999cc46092404ffef95f6189d98b41e5326128c4619bae5a1b5ce8012db06418e3347fe24e92cac5f29e1dc75c3e0
- SSDEEP 98304:YSgV+Wz0H72Zr300yyVa+Ng+u8v90TfoGB7JmZbTlk1La7RM3cyQfWGWhcumAanB:Ylzz0HEro+NgJ8v90MGM+e/
- TLSH T1D1B64B57ECB941E4C5AED179C6269622BB713C884B3063D36B50FA242F37BD0AE79740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects SkuldStealer
-
Executes dropped EXE
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.