General

  • Target

    nova installer.exe

  • Size

    231KB

  • MD5

    bef480ab09f3eb334f70e412244d96bc

  • SHA1

    56c1e8bf806570155c229e077f00d4403ee50474

  • SHA256

    6df5a020b8998f42c05475cfa66462818ced5e4f5102da54afe312f0be0325b2

  • SHA512

    d630b40c4694713a3d82928d0a0cf337778d50f828470373b33442d474ce7df4bdbfc5f5689f0185ec5935e391ff9ac390fc56a97ea4976bd2d8b1a4108afe87

  • SSDEEP

    6144:RloZM+rIkd8g+EtXHkv/iD4SL/yuMzvExlwOffuhU8aemlT8e1mei:joZtL+EP8O/yuMzvExlwOffuSjl6

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1149921374136176760/Zo94Nno2vPkbI8xnREWNtddo97Q5wc3ycRFLdccF4QqcXBWF4l_-UALvsRA-PS9cmQD5

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nova installer.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections