General

  • Target

    xlucheats.exe

  • Size

    231KB

  • MD5

    118714b4be372564292805a6016487cf

  • SHA1

    08e8bf51aa6f2815d8ef050c21912a079d62aaf7

  • SHA256

    b9bc80f978004667f7061aca80b41361b8ed3bfc49a1c00845d8d89688625b53

  • SHA512

    523436e0a966027c1e87f9036025f956b96a9e9ded6cdc1f9da9df77384b2c176e758f219834268e9d37f5a236eef551a2561889fc2db429f6e2e49124ade34e

  • SSDEEP

    6144:xloZM+rIkd8g+EtXHkv/iD4GAOk8il92vDe8NhoFynb8e1mmFMi:DoZtL+EP8GAOk8il92vDe8NhoFInH

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1241683850384506880/zLFG2DSEFT2WP-EtBvSKwL_2AGFnn2eLnDpU4OZbOwN7IHodOwDDbvSlZd6dQXHK_Sx1

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xlucheats.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections