General

  • Target

    lol.exe

  • Size

    9.2MB

  • MD5

    93296816398ac7ff5fc9d91f8d2765b2

  • SHA1

    f5817b3d34c22d0f847028797db143d75f592536

  • SHA256

    1d84ff128228995c275b3e6c05cd19e4e46fcb7574cbd7fb3934abb3df3d1129

  • SHA512

    fef4af08ce771ffad5eb500813052b93ff3c4c71711c03e9c9314fd16212b89fa14f77ca9f648c57617600c4fb932ebb7dd5bf97685e480106f79c98ac15885c

  • SSDEEP

    196608:tbVYKe7PFQhn5EQ9hNQAYzA5k6cTWDn7JKObS09BBI3:pzu25EWheYkv8LlB23

Score
10/10

Malware Config

Signatures

  • Detect Umbral payload 1 IoCs
  • Njrat family
  • Umbral family
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • lol.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections