General
- Target aimsense.exe
- Size 148KB
- Sample240222-c8mpdaag7t
- SHA256 df43da5e9f003414fb7087d002291d62e509d1f977e1304d647abf8ec241a68f
- MD5 db11d5b13124f9dab72425ce56662a4f
- SHA1 09b901184f4865437769f0999bd6d9589008c25d
- SHA512 71597bd4ae24b1b74904f7a09c0fdac8d082a86e1d0d794f419057bdccf7f3c5dc07f60cc3499aa00cf2b96e181b7f35b33dbf5fa55a755d7e6fc4c766a708f4
- SSDEEP 3072:3w10kz9kMiNZKVHd64TGyTOdp6KZt+2T4m6DkBcsfdmC:32T9kMiNZ6HgdyTODZ4p0cWd
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Malware Config
Extracted
Family
-
umbral
C2
-
https://discord.com/api/webhooks/1209997264991555594/9lDazTklKzZKzTTEKzGTtk4UXPjIs2Q2Z2D-ej4Esant-MGCP07bpGNI4w65xZpkCXsD
Targets
-
- Target aimsense.exe
- Size 148KB
- SHA256 df43da5e9f003414fb7087d002291d62e509d1f977e1304d647abf8ec241a68f
- MD5 db11d5b13124f9dab72425ce56662a4f
- SHA1 09b901184f4865437769f0999bd6d9589008c25d
- SHA512 71597bd4ae24b1b74904f7a09c0fdac8d082a86e1d0d794f419057bdccf7f3c5dc07f60cc3499aa00cf2b96e181b7f35b33dbf5fa55a755d7e6fc4c766a708f4
- SSDEEP 3072:3w10kz9kMiNZKVHd64TGyTOdp6KZt+2T4m6DkBcsfdmC:32T9kMiNZ6HgdyTODZ4p0cWd
- MD5 SHA1 SHA512 SSDEEP
-
Detect Umbral payload
-
Executes dropped EXE