Overview

overview

10

Static

static

10

proxy.exe

windows7-x64

10

proxy.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    proxy.exe

  • Size

    246KB

  • MD5

    4ef1cda1badeab461aa59991f9499754

  • SHA1

    418fb087216cc11b6981a386fe4de673b089c3d8

  • SHA256

    4656d69359cd36909ffafde605da9acaa44f231465c2cf04083f312997a79143

  • SHA512

    2b4e6bcf02e18c8db8a703a109581928cdb741409e3b122a2fbdd387bac0aa8bcbcdc3e9b4673fe8309f1c885eed51b1feae505b18ccacfe9879712cf81aaf72

  • SSDEEP

    6144:ploZM+rIkd8g+EtXHkv/iD4EXNmxfEY3vmfh8It2qI8e1mZi:boZtL+EP8EXNmxfEY3vmfh8ItcH

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1157726362107400293/c6ZEwEOFH8dHCfi4HquKbcfsRWMiQKK9L9XovoVHUUKxMY51EPd2dS1MpKFqF1hr-Bkq

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • proxy.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections