General

  • Target

    Umbral.exe

  • Size

    231KB

  • MD5

    5a16bf141dbcf75260bad1c54966e13c

  • SHA1

    634be534e99829d3eadf84ca3012e2f1258d89a5

  • SHA256

    edd1e3ff0f0c032599ce66382d4f4487660fd283ba5d3013fa3374c4604449b4

  • SHA512

    847ac52edf8e62dd3aca4b98c671133e579cd2a1b4f8d69a4066fff08d0ed658848bda4613f42c74e70814ddb00580e06114503d312fcf4df81162d8b85b1725

  • SSDEEP

    6144:RloZM+rIkd8g+EtXHkv/iD4C9MsyVtGtTOMdRYW4l+VF8e1mWj44Di:joZtL+EP8C9MsyVtGtTOMdRYvl6y4O

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1209932890964496414/f0ORMB5uEI_SJlyjGuV0Ujxzj-K8et6_5tqY47Cuda-yKUjAsRLxtuDKzgte_h48lcZY

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections