Overview

overview

10

Static

static

10

y.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    y.exe

  • Size

    229KB

  • MD5

    e55c738dfd6a954e2639c1a6cf3cf33d

  • SHA1

    ec44eb7e74102001e534268513bbd84f37ac689d

  • SHA256

    65fe3aca61ba85663615daadb56fb3bc8e49db4348ae0df15309d22e7d406c68

  • SHA512

    7fd358cd8ac0f99906a0ddd1b7e27c0eebd7e783820036de6e447d9857992d3ed8a82c919a994d9ca159387dcf2f87e7c0c1ed3e6fa072909e85daa7cc2aa5ea

  • SSDEEP

    6144:9loZM+rIkd8g+EtXHkv/iD4NvdfL+8D/0BVA+Pv+h9UC6ly8e1m73i:foZtL+EP8tdfL+8D/0BVA+Pv+hmKb

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1265414227544510476/z7ZmpORKWi6uw-WGiKu-gg41cbjzQzZg2Q_Hhhs4fA7ds2906MCIreFKp467iVT9ZsUz

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • y.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections