General

  • Target

    Umbral Builder.exe

  • Size

    212KB

  • MD5

    f76077bc0ab1e9ba4abd4ee74e481631

  • SHA1

    56368f4d35276298a8f11f3e6d30044a2bcb1cf7

  • SHA256

    e147fd2cd1d20698a2245593f3edfe9fd2ddd8c136cc01ba915ec0469bc6864c

  • SHA512

    c7e314dcf72c78d15c449f469b9c7f8df2a2af676be6f97095eaa160a1e9392befd472bc528f9f0834979a86e8ea8b676cd066332ca61d25a9c170948417e17b

  • SSDEEP

    3072:PmpcjvqySgPAm+D9Cocawot18PeX4UD7oNHki0sMXSl8eN7s2fVXzcGTSY1:KcWoPA1Rrt181I7oNHk7y8eNYupS

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1117450544399786015/OU4UNpw4R5_qFtBmmTNa-SvSSxk2W8uPd6S_1NvOKdhKc_1nBmkhOSTmAG0s86S6Ykdz

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral Builder.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections