General

  • Target

    AppleCleaner.exe

  • Size

    229KB

  • MD5

    932743e04b592d487ccc1228d06c1861

  • SHA1

    b73718231a99836cd795a267c4d8283a4ac28f98

  • SHA256

    566b54607603dfa8fd98fb3a37a269324e8fc4d663a5d350b5ffe262cca417fe

  • SHA512

    4ac1c1d385651fc3e6a04c53d3625a8a2a8f9cdb40f1fd136136d1b289763732765d2424f9eb13fa6040d211dbc8c768b2bb2e6f3032b105c1c04c90d161b07e

  • SSDEEP

    6144:dloZM3fsXtioRkts/cnnK6cMl9I6lrecjfUo1gevPeEtb8e1mxni:/oZ1tlRk83Ml9I6lrecjfUo1gevPeg/

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discordapp.com/api/webhooks/1167513750333575188/AwbF1-uOQDpdmW47qlMpgKElmAEN9IkhChVUYloDWwzZN7yxpb5pSWmYr75EzFmVpes6

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • AppleCleaner.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections