General

  • Target

    Umbral.exe

  • Size

    229KB

  • MD5

    ac6dc91bec5d51b9b8f7b36642f875db

  • SHA1

    ebf088795549ec27047225f14b3263c7b022168e

  • SHA256

    cb32d0fc4534e19ae8009edacbe41b2aac5755b8c7bf233fd4c9b39a00f9b318

  • SHA512

    d44f953ea4aac986c5eea7242ad0d0b6143117781ab9f35537523ad0f4cf95b23c5aeb223ba74febba96afd9006b3f20edbc2bba2113661aa6d56368c93598da

  • SSDEEP

    6144:tloZM+rIkd8g+EtXHkv/iD4qacRCg/7IER0STTKreb8e1mHi:voZtL+EP8qacRCg/7IER0STTK2Z

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1234183133469872269/MIIOnNo8VcCEi5VwyIjRjJPVNZay1YPhZPz-L35nkeXNLLX5C-iO19uzba-gTFrjoLTw

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections