Extracted

• • Target
    2026-08-24_90c7b7f3f89eb6b153a2f4509a482ee6_coinminer_dosia_frostygoop_glassworm_hive_knight_luca-stealer_poet-rat_quasar-rat_salatstealer_sliver_snatch
  • Size 10.4MB
  • SHA256 1af87171927cc76becc14d7c3b76b9cc49cc9e7c733695d2db4dfea32cc1c20e
  • MD5 90c7b7f3f89eb6b153a2f4509a482ee6
  • SHA1 0b48a3ef704051d24cb34ec2ed7485c3d1552a5d
  • SHA512 d4326cd494b2e70c81e5d714a329aa63aaf51eebe49e800043d8a452cf1d0a0d7131c21a4336f17370a9dd5f019a9e438c45633916bf10d2b38ecf0490f60735
  • SSDEEP 196608:Lhkk1bXuUCIgWI4urIvcRan2bCyyR4vwT:Lhkk1qU/MgcRan2bCyyR4v
  • TLSH
    T145B64947E9A545E4C0AE9135CA269263BF713C884F3063D36F60B7252F76BE0AE79740
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoveryskuldpersistenceprivilege_escalationspywarestealertrojan

  • Detects SkuldStealer

  • Family: Skuld stealer

    An info stealer written in Go lang.

    stealerskuld

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers

  • Detects executables Discord URL observed in first stage droppers

  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers

  • Detects executables containing URLs to raw contents of a Github gist

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Adds Run key to start application

    persistence

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

    discovery

  • Obfuscated Files or Information: Command Obfuscation

    Adversaries may obfuscate content during command execution to impede detection.

    defense_evasion
  behavioral1behavioral2