General

  • Target

    Umbral.exe

  • Size

    243KB

  • MD5

    7c28489ab3d43ced3c78f673e298e07c

  • SHA1

    ae11b318d173b3f4a214c46d07b1301dc87fd30c

  • SHA256

    2f25085b9c09c476013e70d58036ba70dc72815c5222be2018c4ef46a81222e1

  • SHA512

    dd6dbba78ebcaefc2c7efb2dc28752f30aa5a604a7447ce2232f7b73bdc070782b2744ebd0a7f044414ac8a91e30cbde5c131af6647c1d45584a07fac9bf538e

  • SSDEEP

    6144:ploZM8XU9Zx0kt8X0/PSCsMSl8kqNlOiLWU1pA1AoK28e1mpl48miP4fF:boZof0kkP/l8kqNlOiLWU1pABUl4KPKF

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://canary.discord.com/api/webhooks/1222893043523256413/kVdC6xi0d19_VgXsX0E6ouVZvJbnDBAdeDW-QWqcfdFGP4uvsZwKvhisOiPIseTSw6CN

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections