General
-
Target
xdark.exe
-
Size
229KB
-
MD5
4d3247cc8c41f20789fee08c48359cde
-
SHA1
409a5ccfec9dcc173d79c2f760a389439d024afc
-
SHA256
8ae1dd94ce9613b67ea8eb9e4ea1868824b8714bb1b184debd03048f668823dd
-
SHA512
65f6cf419a656840825923944cf737accc9f5591266694c94c1ac9477fef4f79a60e967ece7c878b853b63c99ce7662ce808ad58ea49a25b00b8b3cda9f8b22f
-
SSDEEP
6144:tloZM+rIkd8g+EtXHkv/iD4AO+VQ6YXzQKXap8aLLyuQb8e1mni:voZtL+EP8A3VQ6YXzQFp8aLLyXN
Score
10/10
Malware Config
Extracted
Family
umbral
C2
https://discord.com/api/webhooks/1254779924942815344/paQTAR6d7STvJNov66hJHd4xaJNTOXwswjCKb6Cs71b56_nmOpo2YNIVcTlWo9Dqozh2
Signatures
-
Detect Umbral payload 1 IoCs
-
Umbral family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
xdark.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections