Overview

overview

10

Static

static

10

Umbral.exe

windows10-2004-x64

10

Resubmissions

26-09-2023 22:14

230926-15sm8afd22 10

26-09-2023 21:56

230926-1tqdqadg6x 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Umbral.bin.zip

  • Size

    90KB

  • MD5

    8b4493da5ab2eaf7b6c65fc50304a82e

  • SHA1

    e0a31c4ed71e18a044048783e7f34b860dfe7b1c

  • SHA256

    12fa9aa3c10013a89dfc83a538dedaf7d6dec6cd126b3eefa77c816103b36d16

  • SHA512

    ae3797768881bf397462bdfcf0575504b7387ab5bf18894dc4577f4c197af04dc5522e72ac82e670f90b2a8d23066ababa312de05ed3504a8f8ca45caba5e35a

  • SSDEEP

    1536:1r9Faeb3BNoYbcs5Cv4T+uw8T4w6p/uZGsYbSwxN3D6rY0vu2bLuBW3+WRFs5ox9:fBNDgs5CsmVsYOwvTQY+bVTs5oxqYFr

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1116999435440889866/tFz5sOm8rhkMFZAK5ZNJrBblKVolrxCvoJVsmi8Q21bQ0Tq0IjhhGe0JEdycWjEiET6l

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral.bin.zip
    .zip

    Password: infected

  • Umbral.bin
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections