General

  • Target

    Umbral.exe

  • Size

    229KB

  • MD5

    95b54ca0a6742f2b35c4b16215a691e0

  • SHA1

    81840a84816bb1fed04289470b2f7f144c830589

  • SHA256

    a526a0732206548456573538c31e6f5b050c7ed8ebdf3e63e6acfaa77a766182

  • SHA512

    2b4758ae67a972b7801db9d6fd1ee26ff3a3c399f03019541c06a71d49e7582b9901aa83f9d0f831c4dd6c27d18e0d1032f255f746d8c85fc011d9c59b3df526

  • SSDEEP

    6144:6loZM+9EB1/SqctonEPfCqAdKq9gji8e1mu6:EoZQdSqcwvUq2kO

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1209542310099157102/rO88KSrY6i_l0V_XKqkrJ2fNW4I6M1A2EIwnw-FUW9CplqknvRpSHANTBN-Cq_ZJLfCq

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections