General

  • Target

    RBLXWILD AUTO TOOL.exe

  • Size

    231KB

  • MD5

    f9fcb19613b43fa521819d6fe7e5253f

  • SHA1

    359ce97dc5ee97e3d272eb0ea038f9741825a709

  • SHA256

    08b221edcb2a86e0a71cfa2a501c2f374ab81d51921dd86e9c5ef2309096f27e

  • SHA512

    8ae065eda0d335b994aa61764781d3be795e048e39c2f1993a6eba66e95a6e28a18ecbc1c30d7d71fc3e57b0c92512253500240e2b35836770ac076fd9419365

  • SSDEEP

    6144:xloZM+rIkd8g+EtXHkv/iD4Q2cFKInDA/ZMK7bCGNb8e1mAi:DoZtL+EP8Q2cFKInDA/ZMK7bCaW

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1130983042266169394/T9mxe0-Xx0pSSVQSxtRxSKZJuLawhbiHmAjyx8GkYSXpMTwrGYI44H2bwYANHrfj8KVx

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RBLXWILD AUTO TOOL.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections