General

  • Target

    Umbral.exe

  • Size

    229KB

  • MD5

    f7aea1fe85b23a400c7415f2b52720fc

  • SHA1

    fa483aa9e04b67c9cd0a2210e2f2e7f332aa5f93

  • SHA256

    1e9eb60c3b4040412e7713b686e520a24c0aec6119018ef942fe314e571f55d8

  • SHA512

    fd45fc156c8b74ed718b2c40c9b06ba4c20e5e9ca32e0a4eb033587791320f6c469f88f9e76cc4f9beb38782db9ec8d41ff4030a5dc0f7bf05cbcffd4ff36629

  • SSDEEP

    6144:lloZMHrIkd8g+EtXHkv/iD4ZlCMVjgULJyD1Ac5tqb8e1m5i:noZIL+EP8ZlCMVjgULJyD1Ac5sL

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1192617650090692748/hok5NVgoTBHsU4H9gfFwRgZXcT97ag8ppQZZk_ZKk0THom5fhO6_lJse8wEGqoitVStK

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections