Overview

overview

10

Static

static

10

SolaraBoot...er.exe

windows10-1703-x64

10

SolaraBoot...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SolaraBootstrapper.exe

  • Size

    230KB

  • MD5

    29fc973f5ba727abf85edfb4ee46d81c

  • SHA1

    c18c0265b2539201f7502229da8dee2efb5b5e11

  • SHA256

    f764ca094bf86a91474cde7969cec7cdd4a5f28985888b36cda9b674c53876e0

  • SHA512

    433f49e1b5fba7a36b5fad4e91816d4200ee984dcedc97c8bf3e5369e327e7c7eb09dcd849394f219eeb8dc3a353c41b26af05c40fbfe93dfd0773e0474d4810

  • SSDEEP

    6144:DloZM+rIkd8g+EtXHkv/iD4NJRErDJ6idxIJbGmT/hb8e1mfFdi:hoZtL+EP8NJRErDJ6idxIJbGmTxeC

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1261235663127187457/Szq-6qIh5C_x0sv5DG5enhnVtKsgIs2qwGeX4Ci6llSMKlP-Z6-kQTGPQW0PEzZOZWmN

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SolaraBootstrapper.exe
    .exe windows:4 windows x86 arch:x86

    Password: HMmm

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections