General

  • Target

    NiggaDrv.exe

  • Size

    229KB

  • MD5

    b3b96ea3275dd1f16fea840f735656d9

  • SHA1

    2a18b0fb20a8d3361b3744242b7c4939816985b8

  • SHA256

    0179d68051bc377127ffe0e983a1498646b746b5ef7ad5a83f6f062a4b9d1f61

  • SHA512

    0b016997326d3a324c3733900cbbd69111c2d6d1dcc8e7f349495dda38b8e8481d94a2bdfdc01830429c8eaf169c80525338ef20b133f441fdbd0c8d9c125e5e

  • SSDEEP

    6144:lloZMFrIkd8g+EtXHkv/iD4POT1Cg/7I3R0STTKbKb8e1m1j+Yi:noZOL+EP8POT1Cg/7I3R0STTKiUY

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1218976386673414314/pgatA7CWdO29JuDrMGLeYuJVp4uBB8reNu0_hcBKUggMDpfIHkxs20eYp5lxUucsIEdw

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NiggaDrv.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections