Overview

overview

10

Static

static

10

(run this first).exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    (run this first).exe

  • Size

    231KB

  • MD5

    a300445575b7666a4bcbf8e7d7161bb2

  • SHA1

    cd5f1682962ad047e9cf94689ea876a24126678b

  • SHA256

    fb4f48bc53fbd1949222bd3cc0df08e2ac43619adc5117f7d6ded970407c0e1f

  • SHA512

    e2b13887e7374fe2eb27caaab0852c6df1845c49ac9e75007745524fe94ef028419441433522a14d11ef3d3a93e6461d9d77d752f04b0a6b2c6fa94f4560a7dd

  • SSDEEP

    6144:xloZM+rIkd8g+EtXHkv/iD4W26crT5KyNw4ZL22jUgb8e1mTwi:DoZlL+EP8W26crT5KyNw4ZL22j5wp

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1195960024082698271/71tRoqUbmviXwGIotGdbaoS_xGN0JSn29ZIgx0C_AdvOlcc3A82nCJp5WVlARNOUpCzB

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • (run this first).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections