General

  • Target

    SynapseX.exe

  • Size

    234KB

  • MD5

    03d95fff9c762454b8a8cea89de2d9e3

  • SHA1

    5fdc58b29e10fe6f74ab7dc7d5599b136be0394f

  • SHA256

    a08c820009542834baeba92e8aa762d6810fd021de67b05c6429063af206e629

  • SHA512

    183d5fae435f0ebcf562258feaed1ea782de2ab67e18a348a469129374d3ac3c73a9b8426e0f34bd4bdaf4f3fae48159c29dbdbbaf03c4a0c4ca693a4eda01d9

  • SSDEEP

    6144:nloZM+rIkd8g+EtXHkv/iD4Lu1gBPUonLWvRsY9gfevD8e1m/Ti:loZtL+EP8Lu1gBPUonLWvRsY9DK+

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1176914278230532200/x5Vtyq_bnlvpvUXDc7KQyu_yvTtRqxkcacUU83xicRdezXDNQibPAt-rL13q4AyhmqHf

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SynapseX.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections