General

  • Target

    Steam acount.exe

  • Size

    254KB

  • MD5

    c76a61ed3b075868b99e3575a7c9cb93

  • SHA1

    affce56c1ab83cb2c47ab76e2674f36e30c1c679

  • SHA256

    ba61b0104c910ca1177d94ca3d7e197266d1c14d971cf929b2fc7fafc0064f8f

  • SHA512

    d515fa29846193353708a160d584a826ec7b1c715b55c3ac14fee6c9a6e93c029b16cffe919b7283567c563b3a7362d2446ce015cddb9cda26e73f13b1cc54b3

  • SSDEEP

    6144:04oZoQJ39KtWaV+CRB6jIx7axHUPGUphYc3YeRN66hn7DC8ej58ED:DoZr9Kd8jYPGUphYc3YeRN647k5b

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1252172984362209324/NfCm8EPAtDyiqRcfj_cJNMi_a5jwdKueZ8DE86sWHdid4tUKHCaZ-EOa_l-eCL0S4ax7

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Steam acount.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections