General
- Target celex.exe
- Size 227KB
- Sample240318-rx8vssbf81
- SHA256 d94fca1806e2fd56a8d56dd4599ba69f39633a0247b78922773da7504d51cf19
- MD5 f16dec0bdfdb9ae71b1b410c6ed815ec
- SHA1 10077d4bbc449011fdebc06810fc2196873eaf86
- SHA512 3b9d0b195eb8348fb44739d9a703228113c9810f50e9d145eaac0e8642dbac9435b593be7f982f4b0c041b6bc635b2b14da5fcba577004e3e25f77a2b7ad071e
- SSDEEP 6144:eloZM+rIkd8g+EtXHkv/iD4oAWfecjfUQ1gevPec5/b8e1mPi:IoZtL+EP8oAWfecjfUQ1gevPecNR
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
celex.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
umbral
C2
-
https://discord.com/api/webhooks/1217652066793685103/5707GecBA1Oh6wbHm2CNmyvZn-uWR33dbgdoUwBUHJoiBrsmqxNwEWoYGsbn7dx1KF7f
Targets
-
- Target celex.exe
- Size 227KB
- SHA256 d94fca1806e2fd56a8d56dd4599ba69f39633a0247b78922773da7504d51cf19
- MD5 f16dec0bdfdb9ae71b1b410c6ed815ec
- SHA1 10077d4bbc449011fdebc06810fc2196873eaf86
- SHA512 3b9d0b195eb8348fb44739d9a703228113c9810f50e9d145eaac0e8642dbac9435b593be7f982f4b0c041b6bc635b2b14da5fcba577004e3e25f77a2b7ad071e
- SSDEEP 6144:eloZM+rIkd8g+EtXHkv/iD4oAWfecjfUQ1gevPec5/b8e1mPi:IoZtL+EP8oAWfecjfUQ1gevPecNR
- MD5 SHA1 SHA512 SSDEEP
-
Detect Umbral payload