Overview

overview

10

Static

static

10

AkrienPrem...ck.zip

windows10-1703-x64

4

AkrienPremium.exe

windows10-1703-x64

10

Crack.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    AkrienPremiumCrack.zip

  • Size

    312KB

  • MD5

    431e487b11513783fbec3858169b6041

  • SHA1

    d52b846d43015d219bab3d96f62809b0ceed7cfd

  • SHA256

    471eeb9eeca3a3fb5bc949d95ddc7a29a8910a10b7567e725fc212c86c616b10

  • SHA512

    a8709c23eb53afaf5af8731a8bd0673c4e7a66b09240386c9d2a87e125c3ea744357dd5df80b47e67d3e93d87d95067edd3b3fc0601ff1377b475f552ad059ff

  • SSDEEP

    6144:g6r0R7lHL1q4r+hFDnDXuzXhS4P3T1QHTR/00Cu4DKcts8zaQOsk:pIhZY4r+zDezXDmTR/tb4+cO0aQQ

Score
10/10
umbralxworm

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1260567168722927636/JRzdu6AXLXMoNg-RGz_uMt-M0S5cWTX1XgHtoE2eyWa2C43rIIU36wAR5byWxaul4pBP

Extracted

Family

xworm

C2

connection-elect.gl.at.ply.gg:37777

Attributes
  • Install_directory

    %AppData%

  • install_file

    Crack.exe

Signatures

  • Detect Umbral payload 1 IoCs
  • Detect Xworm Payload 1 IoCs
  • Umbral family
    umbral
  • Xworm family
    xworm
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • AkrienPremiumCrack.zip
    .zip

    Password: Crack

  • AkrienPremium.exe
    .exe windows:4 windows x86 arch:x86

    Password: Crack

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Crack.exe
    .exe windows:4 windows x86 arch:x86

    Password: Crack

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections