Resubmissions

26-07-2024 22:22

240726-2ap5aaycqq 10

General

  • Target

    Umbral.exe

  • Size

    229KB

  • MD5

    7b8f7224e44d39c521160c3b33e22e98

  • SHA1

    a8ab775e550aef4aa3b2f485116bcc245c7ccb48

  • SHA256

    256aa419764dc6cf6fef1a4bbe7a918c207c48515e9e13d18881a69b326c79f0

  • SHA512

    c11c922edb6d3aa634fd68dc59a86463fd29b27eead95864efc003fcbb226610854f3acceff7b580fb96443952aa68696f87ea4004e01af96eca570a75359859

  • SSDEEP

    6144:tloZM9rIkd8g+EtXHkv/iD4u5PpSQPL42BECDja/yb8e1mUZJi:voZmL+EP8u5PpSQPL42BECDjamp+

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1266518334506012802/Qw1X9GG-GFtHfQQhPAxRerwsZC0qm8UTflcN_59heNa2RZHB4gApWY0zSyOfYqSD-EbU

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections