Overview

overview

10

Static

static

10

OPERA NITRO FIx.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    OPERA NITRO FIx.exe

  • Size

    229KB

  • MD5

    826a525b309a6bd67be55fea6d8494b1

  • SHA1

    28adf3b7166432fb6ed3ce06b5eb0da3c8f7fca3

  • SHA256

    e5d1d0f0dfc37fab3c7159033bc0706c2ff9c8f22ef512073a075cb5e13843fa

  • SHA512

    5135f4454728ac8a1be6c958f35ac3f7df93477ed60f311f2d10f79217b399ec2a5fb8aa5ad0a643a2c74149e83a9bfe90a3a6b17a10e1f03bee0b404a9e2b40

  • SSDEEP

    6144:lloZM+rIkd8g+EtXHkv/iD48X88/1+mp8sl3ySXszb8e1m6Xxgi:noZtL+EP88X88/1+mp8sl3ySXC35

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1188876955668467852/cqyHpiV2FRY76-l07wo2qq620MRo07cyuIWBA9V7CjC03_cCKPvo4fsNwpKDRwcpgrP2

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • OPERA NITRO FIx.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections