Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows11-21h2_x64 -
resource
win11-20240508-en -
resource tags
arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system -
submitted
23-06-2024 11:02
General
-
Target
Launcher.exe
-
Size
494KB
-
MD5
f5f45c6904735b9bd2b71868bbfebfff
-
SHA1
2c11bcf6930379d2ab8fb337ea134a27c13e10a2
-
SHA256
7be6d46a50071bf542d951558c9cc676d91f8400c30d48e8cd0a65c4b1bc0c69
-
SHA512
4e68f0dbe0df5653c9dc9c8f51544c7fcf40661a4e1b1074a39b3b498a71a83882a8cb2a3ec738285959630cb25f75f1d7084a7b481f17cf1020319c8cd41e4e
-
SSDEEP
12288:9oZtL+EP8hogVywvrYHhkijD6Oma9DhA/Nfg:LI8OgVywvrYHhkijD6OnlA/Nfg
Malware Config
Signatures
-
Detect Umbral payload 1 IoCs
resource yara_rule behavioral1/memory/564-1-0x0000025D200B0000-0x0000025D20132000-memory.dmp family_umbral -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 564 Launcher.exe