General

  • Target

    Umbral.exe

  • Size

    231KB

  • MD5

    a270d4041c245aec5deeed971fba0e6e

  • SHA1

    b9cacd5e11108f37def65b4f17281fa658dde5ef

  • SHA256

    34ab1f6b7597b68d9799a803d61a8b07ab4221a887cc038c7dff132d857c26f1

  • SHA512

    8c6361c0aca08058bbc3862801247c4516f99bb0935e05ad314e4ee0f9d5eefb41017ba28e5743188b9c68c6495f6a7e3142152aa40737d6955f80b81f626453

  • SSDEEP

    6144:RloZM+rIkd8g+EtXHkv/iD4CiRrQBPUon9WvRsY9jfy8e1mFmi:joZtL+EP8DRrQBPUon9WvRsY9MeL

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1204944287041847307/aoa_S28cr8V4g11xswAZC9SdvRJS8ygczDK-GfItmMFXCcL2edroJI5lraSE-OISlf6d

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections