General

  • Target

    SpotifySetup_1.zip

  • Size

    89KB

  • MD5

    38d1b845ee5deaad91808d75a1458514

  • SHA1

    c2bc1f051cfeccc379b4794ce1fe5db548620fa6

  • SHA256

    d39cef65b44e418700bda90bef68dd0aa7f3f83dd9564131c51c40daaf4cb491

  • SHA512

    368937f3b47e51cf0f52317f018965fdfaf8e00b46878cfcc80be17442b726d370372278853f0a84f57ec8ce6bc6d6ebf86fce6ca03d5de41f4bf74ca962e0e2

  • SSDEEP

    1536:DETIfVouvYh+A7zwhEM/+5FDeOeA8UcjYHi+r4GyZjULPvM2yoviaGSAE3lILZaR:D/N1i+wz0/+5Fi5A88Pr+juPR7YYI9GR

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1155326667607248906/ckPMDkA4c06pUZf3rnaC8aMUCcIFlai7uDy7iXcSY3s-4GIeTFxJTH8LK87haBKi2aes

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SpotifySetup_1.zip
    .zip
  • SpotifySetup_1.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections