General

  • Target

    Star.exe

  • Size

    235KB

  • MD5

    89d9c3ae4167a3b9a77a6a3ab0c2059c

  • SHA1

    eed768337a0b4534e667099f4b24476f69d16795

  • SHA256

    cd4ba31d82b9a83f45d5c2a12b91dfce88b70acff2ed894bb1abc617a98fa8bf

  • SHA512

    ca888898ba94230d24caa6c34da28aff00b62af4be33537ed1e228a668cca921e6211cdcc163064df1bee62974f1b028550cd70c99896bee5e4797681db44f2d

  • SSDEEP

    6144:3loZM+9EB1/SqctonEPfCqAiBaJTlOyNLcxDiijSjj8e1mEXC:VoZQdSqcwviBaJTlOyNLcxDiijS/M

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1209321304994619533/mMcDpunpyAbML-H8z32uQlMHknkdb5LP13ysEZnYmct14-eXHUHss93NnbJFOWSbWxWO

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Star.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections