General
- Target Celestial.exe
- Size 251KB
- Sample231010-2arccafc7t
- SHA256 ed702d0b8e9551446f6ffa0363286712615e10bfdfe66d039bfc9db861f6ab19
- MD5 bd135af56e98782a34081767be973f13
- SHA1 8e60cf769dba53a1465e55831062729bedfbb146
- SHA512 2c4611886912e354d823fb740dd0372ac6c2ca80235e5d37b5a37efda75c2deceba8a395e3a402dcc614014bf68518e14683cac57baa8abb330fe71e9e36ea2f
- SSDEEP 6144:IloZMLrIkd8g+EtXHkv/iD4vxBomkrHMe9YW3X2B+b8e1mhbUiIQFceQx:WoZ0L+EP8vxBomkrHMe9YW3X2gWbd0e+
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Celestial.exe
Resource
win7-20230831-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
umbral
C2
-
https://discord.com/api/webhooks/1156697468130566204/OcFf7sKoPqxghTUxcBK46PBL-GzDZUJRuqDmNaCntSaSl1CHU1wYua0VjQTrbVlv7dNS
Targets
-
- Target Celestial.exe
- Size 251KB
- SHA256 ed702d0b8e9551446f6ffa0363286712615e10bfdfe66d039bfc9db861f6ab19
- MD5 bd135af56e98782a34081767be973f13
- SHA1 8e60cf769dba53a1465e55831062729bedfbb146
- SHA512 2c4611886912e354d823fb740dd0372ac6c2ca80235e5d37b5a37efda75c2deceba8a395e3a402dcc614014bf68518e14683cac57baa8abb330fe71e9e36ea2f
- SSDEEP 6144:IloZMLrIkd8g+EtXHkv/iD4vxBomkrHMe9YW3X2B+b8e1mhbUiIQFceQx:WoZ0L+EP8vxBomkrHMe9YW3X2gWbd0e+
- MD5 SHA1 SHA512 SSDEEP
-
Detect Umbral payload