Overview

overview

10

Static

static

10

aqua.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aqua.exe

  • Size

    229KB

  • MD5

    832b0f69e45599345ea82ccb17b9dc2b

  • SHA1

    095d58cb166db0b4cedfd6a608b486aabe973539

  • SHA256

    d62d20e29a48e72a734f508da7e9f846d4ce86c508e1e35f5d6bf1bb79bb0903

  • SHA512

    5627bfc2cff426cd75981616e263cded8bd1531a2301303199dca1a2836dacc42070767631bc2a766fc2187a81a002fd06c241531277adf4b07a2aead4dbb0ba

  • SSDEEP

    6144:lloZMHrIkd8g+EtXHkv/iD4IXu/cCFdWtj+ctBI4kb8e1maHi:noZIL+EP8IXu/cCFdWtj+ctBIxQ

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1220069539069563050/zxN4Ew3bBFIRZqePrUxrfkpmDDY33Gr-evzJR44SuGBJ33mnvW2lhPf61k1Eo_Z2Cy1C

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aqua.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections