General
- Target nezurupdateopenfirst.exe
- Size 231KB
- Sample240621-ctl5aszemn
- SHA256 db8e7fa7eaa81e51c4d220c4b2b0902cd7825e0178f7ec81f93089ecabc33861
- MD5 47fd9d72c46a553881e1fc76b483c93b
- SHA1 607081e5176f954d5070978254f3fd0721dc31d3
- SHA512 38757d02a0d5131b66d8b1563faacf68d23bb9c5f9731234250bec26300792fe29c884b26f2d96426284d346e0755b5644bf1187b50a2f531f5d25b2477257d4
- SSDEEP 6144:RloZM+rIkd8g+EtXHkv/iD4pmFf4+ZRSk3q459cSnb8e1mhyi:joZtL+EP8pmFf4+ZRSk3q459cMW
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
Family
-
umbral
C2
-
https://discord.com/api/webhooks/1252678942742151361/HBvxdJd4vu8gnPhxIX5KwsWiCZoYrdTlCJFNeK7THaxRzoTXk9tGx8gzVwXKo4ecsQP7
Targets
-
- Target nezurupdateopenfirst.exe
- Size 231KB
- SHA256 db8e7fa7eaa81e51c4d220c4b2b0902cd7825e0178f7ec81f93089ecabc33861
- MD5 47fd9d72c46a553881e1fc76b483c93b
- SHA1 607081e5176f954d5070978254f3fd0721dc31d3
- SHA512 38757d02a0d5131b66d8b1563faacf68d23bb9c5f9731234250bec26300792fe29c884b26f2d96426284d346e0755b5644bf1187b50a2f531f5d25b2477257d4
- SSDEEP 6144:RloZM+rIkd8g+EtXHkv/iD4pmFf4+ZRSk3q459cSnb8e1mhyi:joZtL+EP8pmFf4+ZRSk3q459cMW
- MD5 SHA1 SHA512 SSDEEP
Detect Umbral payload