Overview

overview

10

Static

static

10

spotifyfired.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    spotifyfired.exe

  • Size

    231KB

  • MD5

    6a7d1aab031a0780d99a655022b65180

  • SHA1

    fbb429c748a66a57203e20af2815788a2999c9c1

  • SHA256

    66ea5b27209bd7926f3715108d7c7b37fa171f8fa91697e8b14810835c0ddb39

  • SHA512

    5680eb4868060d3d16bc38fdba2aba2f50cb189bd0929260cde6890e1551e545125d8e2383848ff740ed2f406b1d0a45aa4b5ac0cab8b5b526ca35a877bce8d5

  • SSDEEP

    6144:xloZM+rIkd8g+EtXHkv/iD4Cno2p3cw/ceHp0AV3h6lS8e1mdl2i:DoZtL+EP8So2p3cw/ceHp0AVsi4l7

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1242030455545659544/jdxeZ0Ed43Ez4BGNXnOKsGcxqX-N0ShwvNEdlslCsbY4McuJJJcB_uxzFaDb5J8i9kaO

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • spotifyfired.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections