Overview

overview

10

Static

static

10

Celestial.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Celestial.exe

  • Size

    251KB

  • MD5

    bd135af56e98782a34081767be973f13

  • SHA1

    8e60cf769dba53a1465e55831062729bedfbb146

  • SHA256

    ed702d0b8e9551446f6ffa0363286712615e10bfdfe66d039bfc9db861f6ab19

  • SHA512

    2c4611886912e354d823fb740dd0372ac6c2ca80235e5d37b5a37efda75c2deceba8a395e3a402dcc614014bf68518e14683cac57baa8abb330fe71e9e36ea2f

  • SSDEEP

    6144:IloZMLrIkd8g+EtXHkv/iD4vxBomkrHMe9YW3X2B+b8e1mhbUiIQFceQx:WoZ0L+EP8vxBomkrHMe9YW3X2gWbd0e+

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1156697468130566204/OcFf7sKoPqxghTUxcBK46PBL-GzDZUJRuqDmNaCntSaSl1CHU1wYua0VjQTrbVlv7dNS

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Celestial.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections