Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Umbral.exe

  • Size

    228KB

  • MD5

    18035d182c38cd4bdac10b181d956b32

  • SHA1

    7a024ccc6625b4c232064cff47dc52b3d3efe4fe

  • SHA256

    e15b1ff3eb180023710277f71246a22b705ff26a4826789a004b77137df5d30d

  • SHA512

    9cd6c414a15ae3cf89756f081e464c5e8ecf2951dd546a7930d88d31abb48ce37ba263ad18d0c3cdb74090ce0f85847d6747c183b61274c43f9f9f445a077566

  • SSDEEP

    6144:kloZMIrIkd8g+EtXHkv/iD4LQ1DjpaC9uop7mGzuib8e1mBi:CoZnL+EP8LQ1DjpaC9uop7mGzhj

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1142980339636109362/qohfOqTYDAaC8YtKuRZ1oufQY7vSb5mvD9vCE3GyKk9lZ6xiwNkGQ4RhSWS4Dr6Vqn1u

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections