Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    bulder.exe

  • Size

    228KB

  • MD5

    d8de90f21ece872c78887d8532bc4724

  • SHA1

    8abf63837160fe18efb7629ed630402cf9bcb361

  • SHA256

    11e06b3c4301175f96442f0295d9dfade52bf2e9712d2a84da3c54d4d4dd47b9

  • SHA512

    1c02c2560f8a198b0cea474a0b90ef9b5050a3ccbb242ed1600ddf149bb4166a85d69a66622b07884f4ad59e3da447b74e1682f9376ea8d1a54ae48c2776bc49

  • SSDEEP

    6144:xloZM+rIkd8g+EtXHkv/iD4F9KUw2xpaAPyAxVkjab8e1mci:DoZtL+EP8F9KUw2xpaAPyAxVkyG

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1211695583761408050/M3sBx75jnQ4OpdtOFVzvJ-JieS2qJbDuqhX6C2TEnMLmcYoKAYIyrKhhV1GYBHRI53rX

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bulder.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections