General

  • Target

    KiosceneSoftdrivev2.10.exe

  • Size

    229KB

  • MD5

    18dff45f8e9eb29b0fb13e341bdd8dfc

  • SHA1

    768114e6ed8a6dab7eec0e677d53430c37e5393e

  • SHA256

    dfaadfbf1693ea477fde1a960b20280daa82e35128f537a62859bc5aeff9a948

  • SHA512

    ace88964c82470394bd18f6b1ca16fecdf3394b0900f0b375dc358bd8577828e7041c35d9bb790b9d91b062df9167963221f6c7ab62740c6f5ae1e9861c5f223

  • SSDEEP

    6144:lloZM+rIkd8g+EtXHkv/iD44lU3HdmOhOU9va6v1Nb8e1mpi:noZtL+EP84lU3HdmOhOU9va6vXj

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1268792358443679786/BLaBLMMa4NWUzHHIdleoWZKehmVAekW_z3wN7Yc2GEAkdMnni-xyyUOgxC4wH7tVKOFK

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • KiosceneSoftdrivev2.10.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections