Overview

overview

10

Static

static

10

Xworm v5.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Xworm v5.exe

  • Size

    227KB

  • MD5

    651eadc8d63128936bad4ed36fb3dc4d

  • SHA1

    68098378b68264b898c9e14a9305abb30d9a7dc3

  • SHA256

    733edfe6c781586a9b34bad9abccf251970fc8c8bab9664cab831448e637800c

  • SHA512

    ce417957e4a37a7b41d930689c899708ddb782b968c45f1b19a607b04dfc2dedddd90b4ff04c1b76f8bd36c2991100ddf177a9d4d6e694bb9332a8b1e1e3e1f4

  • SSDEEP

    6144:eloZM9rIkd8g+EtXHkv/iD4ZH9Pp3cw/teHp0AVpSb8e1mqi:IoZOL+EP8ZH9Pp3cw/teHp0AVIk

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1188184000313950298/5mJewY7yg23X8-VzMd1ecniDWm5l4tLuncHRPEmGdwvrLWuh41BMjJbrNjMwc69v5N5u

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Xworm v5.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections