General

  • Target

    Recuro Ext v2.exe

  • Size

    229KB

  • MD5

    d7012377350fd49496b9204c27fee5c3

  • SHA1

    6e1626fa282224e2e4970c29df0960098b60f775

  • SHA256

    03f48b05a4b0d4070d0c10dc264b64a2edf0a4c767dfc499e045f84f6c9b271b

  • SHA512

    88f1b96894253e3f5f14a22a02f43654b8abdf7b084ac9a38278aa7898503c00e35db2c81a1f691d9ed629df7a29ce190bd51f3ff35b3570d7e1d8a30ad617d3

  • SSDEEP

    6144:lloZM+rIkd8g+EtXHkv/iD4cu5xClK8e1mVWi:noZtL+EP87qqI

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1171135711265693707/suyu_S1KJ-KHsLzIWQk2vHvZB-VOItFNakV9ElIiKEkHN06tueFhsHUSEifG5Xi0HJLl

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Recuro Ext v2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections