Overview

overview

10

Static

static

10

Vigo_Perm_Unban.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Vigo_Perm_Unban.exe

  • Size

    231KB

  • MD5

    cfa56d70ed0ea4d1ebfd6952e840787f

  • SHA1

    7414f2b22dda079c566df2fea6d067dd3ef77f75

  • SHA256

    a1c965d8b6a12590647fd41d124e260b7ffe6394f2b3a68a972847132f17f0de

  • SHA512

    c78296ac937a2461773cdfd07b200eb004e7d6135fdd169df878ea4bd1f6ccbd90d980760efb529c606d0df6d4838d06d7b63ad36a5c662540f2c6d35d09991a

  • SSDEEP

    6144:RloZM+rIkd8g+EtXHkv/iD4SOIQClk8e1mpSi:joZtL+EP8UscH

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1169389530785271828/whjZpzO-dqrs0G5UXeFDG48g8Z-iL6SRQ2SCymVDDls2LCPRTpceEPjUNJFtgmPfAKCU

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Vigo_Perm_Unban.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections