Overview

overview

10

Static

static

10

lol.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    lol.exe

  • Size

    227KB

  • MD5

    f7e108f3ea7ab6962d82ad4f6962a8ff

  • SHA1

    f9d9c0d3dd92b52710a579f2d5c60f6f13b377e0

  • SHA256

    9770183a26351c9ca249c5857093961ba4ddccea5098aaac898c7561a6d32e3a

  • SHA512

    dfa70b49c4b92242c6824cce1afaba46c332d3445d7075dec7ae02273c94c7f6e3c1e0ff47d618a2ca1764201a8cfef08d2e97f46ab72ecddc4a65f09c26a41f

  • SSDEEP

    6144:eloZM+rIkd8g+EtXHkv/iD4pepi6YXzQTp8aLLyo6b8e1m/i:IoZtL+EP8pepi6YXzQTp8aLLyn5

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1224434242570817699/5ZCADSZXw_vDza9J0PDFgsltf6OW01rd-bOhCy5wKw33O7Zr4iftMluQuXaEzCTKR2uO

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • lol.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections