General

  • Target

    moon beta.exe

  • Size

    229KB

  • MD5

    a43d31f62cc5fafc444b1e45a6216fd5

  • SHA1

    53e7567a150e695e77a91f7214f01f03ece73604

  • SHA256

    293e2f2b00d9d2f5ee8b6e0267ff38b4052486d8846a9da1e42874ae1c461948

  • SHA512

    a7940669a2ce2ea8687803d95e08088ec591e10463eed1410c9e5fd3c896923a22c20f47fa91bd0932c79431d9aa444fe0880515b1d69ea6edcd8549f17af084

  • SSDEEP

    6144:lloZM+rIkd8g+EtXHkv/iD4PaMtrRiK1CwBzOur5bb8e1mki:noZtL+EP8PaMtrRiK1CwBzOurVe

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1145053414678597632/Jvo1iwEyttGHjwDlIyjzjIRT3cedT-JMJUzw2YforJz_c-ei6Xzx-pCANw298WjpiqHz

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • moon beta.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections