Overview

overview

10

Static

static

10

DX9WARE.zip

windows10-2004-x64

10

DX9WARE/Re...en.txt

windows10-2004-x64

1

DX9WARE/dx...or.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DX9WARE.zip

  • Size

    136KB

  • MD5

    cc99a7351297712241c1206fcfadc0f3

  • SHA1

    87dc5692429931626cc796d1ad8d4cb49e2f35db

  • SHA256

    4754cedbaa0c6c31d34744bbe26f231ff6fd92fd6ed0c832d489689709d1cacc

  • SHA512

    bb19ec736aa0bb996c943afb9228a496f16e772a1b19a1b4f79bbbffc55ac555af975df506d5ac1d301f5485f81dd6edc1cfc90e3bf5bafe235f296e90dae874

  • SSDEEP

    3072:owOe09+qfy3YEaXKMwpytpgcStLKXiMirtsTJ7NtfAEQhp4O7Bkei:a9+q6FM+KljhPTBvfAEWPBc

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1157539550202175508/bMQmprnNW_YWr8QpVQ5zMXdWzlm3rfBo94XzDEmBz73xfPgW9fNPx7PlsrG8XSq9bHed

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DX9WARE.zip
    .zip
  • DX9WARE/Read First Before Open.txt
  • DX9WARE/dx9injector.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections