Analysis
-
max time kernel
51s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
13-06-2024 15:53
General
-
Target
Loader.exe
-
Size
495KB
-
MD5
6c200e0e8ddc021a16094bd07c17b1b6
-
SHA1
faa1dba99441d84898171d9ec2962955235183e9
-
SHA256
837e540ab292132a621130757c1d5f1738f83e44568847e9278472eac3dc3046
-
SHA512
bd5e8d976dbdad7d8f5511d777a0998f3d831054b7d3dad2d0a9969ddd622a519b63c1b06b677fef16c90f9ed9de226b25be6ca5f11752a053d6669ce726a15f
-
SSDEEP
12288:doZ1tlRk83MlgvNh0ad1+F7mEl5Qw5nTiii/Izoqs2PiixJ:G5r39Nh0ad1+F7mEl5QwFzoqs2
Malware Config
Signatures
-
Detect Umbral payload 1 IoCs
resource yara_rule behavioral1/memory/3760-0-0x000001CD0F8F0000-0x000001CD0F972000-memory.dmp family_umbral -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3760 Loader.exe