General

  • Target

    Voxiom.io Loader.zip

  • Size

    141KB

  • MD5

    ef56f0e19e96b9da01ca5f463d0806ec

  • SHA1

    dc5facbdf1ba40a99c7f1e7776a33c05c6598316

  • SHA256

    fdaf5bca3b3bad4071595db5558a1c2e927e7c6e822030d37f13a861adfee77d

  • SHA512

    d4bc28261edb09b0aa558a1eba3961193076c42d4ff7aadc545847366b6a6617275b30118303e0f9acc5e4d6289836d96c43dd0c3f1bb649cbfe4d6406805ad4

  • SSDEEP

    3072:ctE1syfrh2/9CRZiuTwRGjLEcYEUkaEt/pGaghfRNJHcRzhl/:cilIVCLylk9/4agh1HcR9p

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1158524014961111142/-VPn4v1yBepEWZwAJNhu7Jx3WfJFd5I-E4UpnmpC1VZOOQa7-MmG4YDnlX0EK-pxyOKf

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Voxiom.io Loader.zip
    .zip
  • Voxiom.io Loader.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections