General

  • Target

    Star.exe

  • Size

    266KB

  • MD5

    4f2d0374f93b4079599cd3be7293c68c

  • SHA1

    28e6d128300a2a25203d39f492503b0391932f51

  • SHA256

    7e5a131d6b76fd964d4947b9c060fa0ff827162cb5047a9aa7edbe4dc5a91f66

  • SHA512

    7d3b853d1bbfdcbbfb7d5aff8e595590a0f1866459b80ca7822c5fbab1e5043c99e70b87f71cef4033dc4e1fcdc864b0fe0c3e3b84ad595a445092cff35fbfcb

  • SSDEEP

    3072:k2Jog9kK82e+i392qYpQZCi+oynzDQjj5JWCnWdZN7/VmtgzExXB+btwBtIxY8eM:jJo29yXZYmCnzDQjjLWNRmTd98e1Zl

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1209321304994619533/mMcDpunpyAbML-H8z32uQlMHknkdb5LP13ysEZnYmct14-eXHUHss93NnbJFOWSbWxWO

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Star.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections