General

  • Target

    Bootstrapper (1).rar

  • Size

    82KB

  • MD5

    b6239313b2a348d25566bb26f261eea9

  • SHA1

    1e88f30ad4fcdf76d67eba3da7800e2a4a1f2913

  • SHA256

    ca96eb38942e5c7f637142d52b2e8bcac496a4520b73dab10ae1ad313d79cbd3

  • SHA512

    d259cb05b1e62a25c6cace0dbee79de85a65516b7e63f6846df4bb11067f95cd90f092b1e5efca91dd6e6794cb39ab7025f6a51cab95a430a6da50781a8794ba

  • SSDEEP

    1536:lPq7crTA5PU/GViK9dI3/N/rqqAE8bnjDbiHVoe8q3zO0hM/A20QDf:lCI2oGEId6/Mnj/i6jpiM/AYf

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1266158047521411174/7HstskM8QaROZPuijRHfx82NSHiKFwISRrGdP6nBOBuiOBLNEo87k87rhsgSKKjZ__79

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Bootstrapper (1).rar
    .rar
  • Bootstrapper.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections