General
- Target Cynosys.exe
- Size 229KB
- Sample240306-p5w5vsbc2v
- SHA256 6dc0348b0f789df9b0f10d3ec7710be4b968f49c1dd047d3ac5402ad5e14fbd6
- MD5 44712f3532cebbe19d97d59c16baad09
- SHA1 77d521294b8deac4745dab8b843ebc5f875ac26c
- SHA512 06433d35fc99d4cf6b05322659672f41901bb788fde0e89a2e61b32fca33fb67fcf01a69d196adeafa7e90b254d2ca68a805cd612a5e2352fe0a9ba07dbcaf2a
- SSDEEP 6144:lloZMxrIkd8g+EtXHkv/iD4wPAVdLocD0abtIExe5Y+lU8e1mXUi:noZiL+EP84AVdLocD0abtIExUIKd
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Cynosys.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
umbral
C2
-
https://discord.com/api/webhooks/1214102511284129822/2e3S4IoZdNw3laTNPYrAsUQzWieHE049sZpVPtuD7KAPbNySo83DvbnGKsEIaVLWnYP0
Targets
-
- Target Cynosys.exe
- Size 229KB
- SHA256 6dc0348b0f789df9b0f10d3ec7710be4b968f49c1dd047d3ac5402ad5e14fbd6
- MD5 44712f3532cebbe19d97d59c16baad09
- SHA1 77d521294b8deac4745dab8b843ebc5f875ac26c
- SHA512 06433d35fc99d4cf6b05322659672f41901bb788fde0e89a2e61b32fca33fb67fcf01a69d196adeafa7e90b254d2ca68a805cd612a5e2352fe0a9ba07dbcaf2a
- SSDEEP 6144:lloZMxrIkd8g+EtXHkv/iD4wPAVdLocD0abtIExe5Y+lU8e1mXUi:noZiL+EP84AVdLocD0abtIExUIKd
- MD5 SHA1 SHA512 SSDEEP
-
Detect Umbral payload