Overview

overview

10

Static

static

10

Blood EXTERNAL.exe

windows10-1703-x64

10

Blood EXTERNAL.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Blood EXTERNAL.exe

  • Size

    256KB

  • MD5

    a4379fc86adc58efb212f662f3d6b8cc

  • SHA1

    5bf25771ff9006b0cfb6ad820503eedc054362e6

  • SHA256

    bdc7f2fa2abd884838f90a2a44af32c48f7e87d38ed4d887c80bc2f0d4e02930

  • SHA512

    3434272593c73e2ea9b3110e1e54b3ceae20634796dbbc0c1191a2983031171227b968d464de9e106c148e410ecf97ac854d45c741dad00cc76b7d1977a16df1

  • SSDEEP

    6144:oloZM+rIkd8g+EtXHkv/iD4FhHb1DA0r5SjVg8Zg+tB48e1m+ifX:2oZtL+EP8vHb1DA0r5SjVg8ZlAkf

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1178090943421894717/oiTjFNJzJlZPKQv45vEBY3HwoUJtrV26L9ZwuwlL54qr4SW6mH1ZeHMPKBtP_7sAxEen

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Blood EXTERNAL.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections