Overview

overview

10

Static

static

10

test.exe

windows7-x64

10

test.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    test.exe

  • Size

    232KB

  • MD5

    5efa80ce88a765c6603129c757b21a07

  • SHA1

    f5ceec0c07fdce0a9bbb8400372395082dc0c308

  • SHA256

    685f538f83141a64cc51aefe1bc4047c3628c8b27e356ae21896c2722c35dfc7

  • SHA512

    c9f95fc1bd2fed8e0db78f2e212dd3e694b9a4550499c04d4376a538f1eaf59e24f5fb8c667b3d4c1525b93a6e460d02493493b9c5b2a427b628fd3d8573c8cd

  • SSDEEP

    6144:BloZMzrIkd8g+EtXHkv/iD4h8ko1DA0r3SjVg8Zb3b8e1mPi:zoZcL+EP8h8ko1DA0r3SjVg8Zfh

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1257608276456112229/aDiWJ7yaFJnKv0Fj-AlnNJMfR_nuR1LpncwvjyDNzKXKt7rbThXQ2ZCLgEAkgfAdCyu8

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections