General
-
Target
3S.exe
-
Size
227KB
-
MD5
0c6f57e34c60e926869925974c0ba0c6
-
SHA1
c2c96e1a4da5fe008796801569ebdfcde4d3c07b
-
SHA256
3818bc71c250768baec123373d2e873428509f7dcef12a56f4d428d488661c71
-
SHA512
70281ccd28331260e0808d00a0965753e4f8d9c4b8a0e211abd97556429ad7cb3a647a017f53a8d111468639fe9c05e0022cb034f6069b6b9fff214d389ac193
-
SSDEEP
6144:+loZM+rIkd8g+EtXHkv/iD4n6rk/1+mplsl3ySX6Eb8e1mai:ooZtL+EP8n6rk/1+mplsl3ySX30
Score
10/10
Malware Config
Extracted
Family
umbral
C2
https://discord.com/api/webhooks/1143115606330200074/pyKgc8H0hMiolN7TnRv_a5UZxMEV9hMyMPcyMEE79xLCjkKRbFA2ce8qYJuxmfb_M-83
Signatures
-
Detect Umbral payload 1 IoCs
-
Umbral family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3S.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections