Overview

overview

10

Static

static

10

cheeto.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cheeto.exe

  • Size

    229KB

  • MD5

    72614d4abc76ec3142bdc6d5bda7c38e

  • SHA1

    2b616f0b13d92557a7cd73935b3e7e301e294757

  • SHA256

    e82372deee967ba8a1a74e29a8887ac64e700554153267d09a184986a98efa29

  • SHA512

    56d7a569b012da9f9ab99044ac3ed489e1f11a233122b7271f2396e5a11d8e5ddf4f58b8bfa18ae96cbc55c57213d812622777b6fc8684ea96a4919ba202b7c4

  • SSDEEP

    6144:lloZM+rIkd8g+EtXHkv/iD4f6/Ff1DA0rVSjVg8Z+9vb8e1mZi:noZtL+EP8f6Nf1DA0rVSjVg8Z2f

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1254095742596026620/QBmTRb9H20UAgR-IUg-_rpwK5K7NM8whQATf2uiZg-j5JI4v1-NZx8QlzzIl8yg9sMnm

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cheeto.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections