General

  • Target

    Umbral.exe

  • Size

    227KB

  • MD5

    9373f372b640980c2c21635ea1d0e198

  • SHA1

    4a839ba396c68479c9b78cbfd1ea9005c9c1840e

  • SHA256

    1d4614f2beab6bab69464e7cf41e34db255e42a9b8d754d598faa0b9ec4d7b99

  • SHA512

    9a6db6f4a87666e9789273027217d9656257917f530b36c60f9e026bbc9ef2229f66718b6365d0691ec254e153a537bfa1c577f7df4d588218b3c110ffbd46d8

  • SSDEEP

    6144:+loZM+rIkd8g+EtXHkv/iD4SRLvW0b3c5NImHHm9cb8e1m6i:ooZtL+EP8SRLvW0b3c5NImHHmec

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1256869688487710730/3Fj510GAhIc5eHrXmSNeNQgCXtDIkrV654Xp5RicQTcyuhg2Jty3efrsKc3zfTViSvsg

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections