Overview

overview

10

Static

static

10

hwid set.exe

windows7-x64

1

hwid set.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    hwid set.exe

  • Size

    241KB

  • MD5

    721169fc9b9bf1c4d120e1304c966796

  • SHA1

    a81d5de61c0312ce0ba16c72be3ffa1c53f04979

  • SHA256

    5fc3a3f9a9575ab728bb31002759b3a1ea5d9cb56ae976eb5e71215ce6742847

  • SHA512

    4b47b983006ee2824710551fe6216256781f7d8e2f1a22269b77d5c3d032587cbc82434bd1029223c9aa038c8e9664d872fa593e6af3d3a5f287f4b07338f68e

  • SSDEEP

    6144:RloZM+rIkd8g+EtXHkv/iD49N/qa43TwYJc6rrSJxak6l18e1mV+i:joZtL+EP8r/qa43TwYJc6rrSUTiz

Score
10/10
themidaumbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1154536495709950073/BRVnzMP5z7QHY16C2ZGNhmLikx961czF6hm4oBDcHJ1jCqTrI4od8pek_Onb-OfsLS4c

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • hwid set.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections