General

  • Target

    752 tool beta.exe

  • Size

    228KB

  • MD5

    a759f32083e27449c87edf616f7201cf

  • SHA1

    542a64b281d2a91497df88fa5874e822bc99312c

  • SHA256

    f83841cc0280eb729670e084a3f57433794b8edbe863fd88384b6f58288464ed

  • SHA512

    4c386b194e3bf42dc2ad226e9d0253fbbcc7a7e1240f13f3b5ced3dba05516d17c6af8793d61ebb484791f11c0ca8a8e8e1ce1598d6298320479c660efa76f76

  • SSDEEP

    6144:eloZM+rIkd8g+EtXHkv/iD4BljfcCFdWEj+ctBI7Lb8e1ma1i:IoZtL+EP8BljfcCFdWEj+ctBIrLc

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1149102941656076358/ppQxTmck5fkRAVugj7yp_4oiFpeDKHVWUr3fIDtqrqH62waOPlyKshGn2uAwutjSSJ_X

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 752 tool beta.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections