General

  • Target

    executor.exe

  • Size

    231KB

  • MD5

    c44427a9d20943c67d642322fb04f3fc

  • SHA1

    9594b8df83380984201a91990265a7e4a71a67dc

  • SHA256

    df5d7a8f8a3f6b8435b740a0dbbba9f2e1dfe73c089d816ca3de51d8b83c9d28

  • SHA512

    d05556225668c74d6217063dacbd1499e5d690c540f5ed75585104cfbbb76ce1fa0c9d68f2487ef713730f33758d2e007c5f4cce55744f9c519b83c2fc483b74

  • SSDEEP

    6144:RloZM+rIkd8g+EtXHkv/iD4eRJa0fy8e1mSji:joZtL+EP8E4Fu

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1221530657516290132/6VyjhF8mx7dvjlzjVb8l8nb8QHTnx3ZT5kGdQKUbw-B1hTT9lOLrnnV1LSlrR2jYbAz5

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • executor.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections