Overview

overview

10

Static

static

10

resou.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    resou.exe

  • Size

    212KB

  • MD5

    e10ccc6c29f434e57bf20e4b824864fa

  • SHA1

    9a59699a28c8173706d2cb785cea53f45fb4443c

  • SHA256

    547d284150788e783256dc8ad90f90ab6a5a2ff29211c480b4adab5a1032eebb

  • SHA512

    295e3cb9d3844e3586d42910fc2c50d79e08b9e4b5487c1f8a07205b0c26a199227acec7337cebc72926630cd09e5129368851776985f27d88a624c409fe7a27

  • SSDEEP

    3072:TlP/chtWkOIGSkvDvPnsUSCLZHlitA46fsZ44lllllj0em1Sl8eN7bbXVdtXT5jI:9cyHIG3sUSS6A4Uy8eNHhdR

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1188061798528716801/D77SxBvLMy5YYF4k7wJBWj7OUZkf938cAWbclFFSX52NRBAyZASKcq_eq9P0X66HWMDI

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • resou.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections