General

  • Target

    SolaraB.rar

  • Size

    76KB

  • MD5

    6411b4a9a246eef97e589a9df2882f8a

  • SHA1

    1d90311acb334f288f4996df26b1800403a0948f

  • SHA256

    c8615f0c7412de9bab6307491a5084aed1faf308664bc4d21e8d83101afdeb0a

  • SHA512

    0199a12c1fdcdc0125e29d578e6111fb5cd3a51d5370c618fbeba138fe2c42e31418a611df7ead727f510b7da7a53e71f2c09c59850253d58ac07b5b658dcb4f

  • SSDEEP

    1536:Ki2l3ISJ6HumuVjcjvlUiKFyTh7hxcj/Z1jY8LkoGFuQ3n:Ql3pJjmeQ5URyd7n8/Z1xozFugn

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1258158330237423708/TP4vZ1k1Rh4BbYP62cogAVNmLUNicORrL9xsgCelKxJelwVrWSmY1bVmhh1Yvxap5YQ-

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SolaraB.rar
    .rar
  • SolaraB/Solara/solarabootstrapper.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections