Overview

overview

10

Static

static

10

y.exe

windows7-x64

10

y.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    y.exe

  • Size

    224KB

  • MD5

    4c335d3e3958413df7b9c81b7ac29100

  • SHA1

    a43f7ae504164fd29a9bb7f88430efeb396ed69f

  • SHA256

    7ba28499d2c1399eba708b00fdc97095f938d5755d148fbe5626ffa68b8e5385

  • SHA512

    28008caa99955df01abf2d9756c204b0b4105659ea1150c32a54044f60b3ac7a1c0631530e6b6e3bdd377ecaa6aac4c7845691262d18979cc1f74709a13bfce2

  • SSDEEP

    6144:floZM+rIkd8g+EtXHkv/iD4SQzYkK8eucHi:doZtL+EP8RR

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1265414227544510476/z7ZmpORKWi6uw-WGiKu-gg41cbjzQzZg2Q_Hhhs4fA7ds2906MCIreFKp467iVT9ZsUz

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • y.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections