Overview

overview

10

Static

static

10

o8gMi.scr

windows7-x64

10

o8gMi.scr

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    o8gMi.scr

  • Size

    229KB

  • MD5

    e4e5629da7c768f605a4bd15456aaac1

  • SHA1

    63d2852a27aa5edde1a7b20e56c382b82c70e5f4

  • SHA256

    661514e62add3ef14dc1faaf11e1b23f543c3470304efaff4f2526723b884f82

  • SHA512

    9216858e8578cea59ed76ef295358cb0882f1d484ea04260f62535756289318f734d23fe99c2c370f42f5fc6c76c589958cfcb04b34d19fb9a5a051ec35fc377

  • SSDEEP

    6144:tloZM+rIkd8g+EtXHkv/iD4own0fVeGJOMFXSy3DNb8e1m2CxzHi:voZtL+EP8own0fVeGJOMFXSy35/AC

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1211387268460187728/3HFT8UWEGS_HJCF-av9z2O4zjBTxG9RCIvKPqf4Io5WfbLMqrdxrPGmAE3TKbLHXmpR3

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • o8gMi.scr
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections