Overview

overview

10

Static

static

10

Amruus pro...or.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Amruus promo link generator.rar

  • Size

    79KB

  • MD5

    0b25d0cf701d9c68ae40085c1afe2e3d

  • SHA1

    0266c00fdcddc3e2f835cfb4109dffe1e7cf32c7

  • SHA256

    8f0352553ab0acb32642074579db93344be53f54c700ee70bef3335db09c6529

  • SHA512

    cb797620225ab96d36f58dd50570e00a71909ad68d5080ce5d85e0e0b8b85ea38aba4487b434973d8c28b61c5a3914f8e7779c488a67f4b3a9d80bd95fcf0b6a

  • SSDEEP

    1536:shAHcE4HDPB61u7iqzzMXCcCwi8vLusrqAVVEHqdO9A745ig8KHQjDy:aAHcEkZqXfC4rqegqY5FL

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1196551286892535848/BI-4wJMe0VqcV998bhbMUu_wWa9MHqKDsvG2bhmZuynbA6FvVmQpf3BApw4_YqBZ6TZ5

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Amruus promo link generator.rar
    .rar
  • Amruus promo link generator/Promo link generator.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Amruus promo link generator/links.txt