Overview

overview

10

Static

static

10

spoofer.exe

windows7-x64

10

spoofer.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    spoofer.exe

  • Size

    229KB

  • MD5

    67a5fee3d0f74d7105431c44bebc3e0e

  • SHA1

    bc1e2157ee1b8f701869caa5f36d6540d5c98f45

  • SHA256

    e61c940bca2685a97f063c2a12031e9a7db76bdcbe1e87257f60ca3117ab8a91

  • SHA512

    210073a102e0994e193c2691e48f56b012b15f753bb784b13c691e11648b86d0b541e835ce5ec276242558fbd55ef8b4679de7a7a8fda18d61fa1b16c1cec8f6

  • SSDEEP

    6144:dloZM+rIkd8g+EtXHkv/iD4AtmXjsv8e1mpCui:/oZtL+EP8AtdiCD

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1212580806724165662/ST3kafoJ05qNJHjQD4fLY8E5rEdFtc10xLUikQCRJFUV6VpUqr3WXsXpudBNimoD5uxX

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • spoofer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections