General

  • Target

    lol.exe

  • Size

    4.1MB

  • MD5

    967d3eaa117f7ff867a91febcc8d2928

  • SHA1

    638872b00b1a3eed215e60e78c93b8b5599a5898

  • SHA256

    21bd72f49e3a9bd1778fa174fdd0cde88a11ad8bf3cba985fe1367c7154a7abb

  • SHA512

    f45a2bf03a9b83f9a1201eeac1f03b8610969a361ff7e38e4b37f93e80d18a1f33452677caf8546775ac08e1b493fa86ecc859c3cf75d3af1199470b39d0ef35

  • SSDEEP

    49152:toInYnAv1vYjUbQgvdkMgl2Zu7jfWL2ntzMqS1M+etxQnVIqwlwHnEOGc:toIcAv1vYjWSMy7PlnVw1+6q1ONB

Score
10/10

Malware Config

Signatures

  • Detect Umbral payload 1 IoCs
  • Njrat family
  • Umbral family
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • lol.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections