General
- Target Havoc-ExecutorV2_.rar
- Size 16.8MB
- Sample240221-23s2msge3y
- SHA256 b02f3ef73077f0c54cff0e1d920e2013ea549c97daede6cae61c966d556fff9e
- MD5 9ff3dea2bad4a76bc65e98acf1234f0a
- SHA1 49754b9f66989694c66a5a50f33426ffdb2cc3f5
- SHA512 94716419b6a60f2b0b2d454215d1f6bb827f88d8d412115837ed35b9135ff73abd1c3995710c4f52d2bb92db07b94803fee5857041a534d077e0c73bcf49415e
- SSDEEP 393216:5C/zS+kIvNug+zU+29zreM2M4ZFKV0o24pGO23dVC8:Y/3kIluV7QvF8ZW0o2FtL
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Malware Config
Extracted
Family
-
umbral
C2
-
https://discord.com/api/webhooks/1202713966892154880/hKt1959RM0bV5-3CpJAwh821Kr6T7h9g1Q2lLB0g86ovim2izdHbNw9y6LtQFK8C5Zhm
Targets
-
- Target Havoc-ExecutorV2_.rar
- Size 16.8MB
- SHA256 b02f3ef73077f0c54cff0e1d920e2013ea549c97daede6cae61c966d556fff9e
- MD5 9ff3dea2bad4a76bc65e98acf1234f0a
- SHA1 49754b9f66989694c66a5a50f33426ffdb2cc3f5
- SHA512 94716419b6a60f2b0b2d454215d1f6bb827f88d8d412115837ed35b9135ff73abd1c3995710c4f52d2bb92db07b94803fee5857041a534d077e0c73bcf49415e
- SSDEEP 393216:5C/zS+kIvNug+zU+29zreM2M4ZFKV0o24pGO23dVC8:Y/3kIluV7QvF8ZW0o2FtL
- MD5 SHA1 SHA512 SSDEEP
-
Detect Umbral payload
-
Executes dropped EXE