General

  • Target

    Umbral.exe

  • Size

    232KB

  • MD5

    026573734d52b82132fe213163f53273

  • SHA1

    6a0651b69e20e3a491c1f98e07710ddbdac85868

  • SHA256

    336767cc7d04211aaad18b27760226ade4ce15c5787bc2e71cf66535af2f174e

  • SHA512

    0c9c04dc8e6245cf606b0849afb5e486f5cd145a7f0da9371aad29f2022d288c13c52fb63c6e06f3e57ec62db909e8273eb77b372817432a916cb0646261685f

  • SSDEEP

    6144:7loZM+rIkd8g+EtXHkv/iD4Hq14QcCFdWfj+ctBI7zb8e1mTi:ZoZtL+EP8Hq14QcCFdWfj+ctBIDR

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1204944287041847307/aoa_S28cr8V4g11xswAZC9SdvRJS8ygczDK-GfItmMFXCcL2edroJI5lraSE-OISlf6d

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections