Overview

overview

10

Static

static

10

googaga.exe

windows7-x64

10

googaga.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    googaga.exe

  • Size

    229KB

  • MD5

    bb8f1f278c259560f803b9e3ddaab6d7

  • SHA1

    839877183007a9e042f9e7c5506d8830f7337b30

  • SHA256

    ebcbd3447da7718cc8e4a60e88ca8b4d1c707ffdd3e2aae75adccd0c6a845997

  • SHA512

    cdd9e9b95202ff3c081bb85cecb449e470770703b7b3ebf27f4c4af28b3a312be742c8dc4b000632ace7c5a2d700f8e4a26db362594f871390c9582c494f1bb4

  • SSDEEP

    6144:lloZM9rIkd8g+EtXHkv/iD4f1YxndLocD+abtIExHNb8e1mai:noZOL+EP8f1YxndLocD+abtIExt8

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1256869688487710730/3Fj510GAhIc5eHrXmSNeNQgCXtDIkrV654Xp5RicQTcyuhg2Jty3efrsKc3zfTViSvsg

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • googaga.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections