General

  • Target

    c153b693713297df607a8838e063649fe64fd4c997aa55ff288c4536e6897bc4

  • Size

    248KB

  • MD5

    d453a11e605e078c948cffc9e1920d08

  • SHA1

    98bfdd6e94c9ff8ddb42f4ce2f77722b61f20ff6

  • SHA256

    c153b693713297df607a8838e063649fe64fd4c997aa55ff288c4536e6897bc4

  • SHA512

    827ff763ac01769f8bbef4407d5dc89191ffa724b04132ce6e5bf8802ea49ae4a39867985b76557a4d63e3cb608f21774c0d768b9de54fc1830f0754f268cd89

  • SSDEEP

    6144:tloZM+rIkd8g+EtXHkv/iD4DBQxMS1Nmlzus9x4J7b8e1mSi:voZtL+EP8DBQxMS1Nmlzus9x4Ro

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1177226220405014538/ApJMHc22hyWYkaiSVBBN7kvZ9yqRHDAbspngcvmtb-gaUtdVbfAjK9HevOCU-V9zzHnJ

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c153b693713297df607a8838e063649fe64fd4c997aa55ff288c4536e6897bc4
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections