General
-
Target
Wave.exe
-
Size
230KB
-
MD5
8abaecb6ec29fc2d34b4639fce34a7de
-
SHA1
74dc5690b5d337fe2ab0cb9e9ec7ce304458c2c5
-
SHA256
e5b6961e667669a720b10532464f250a31532af60f61a4dbab128ae79da80382
-
SHA512
6276b1c51f8ffb7cfeb7d15c22842ad59788b857761e5df3914b03b4642dfe0fc23108e03f1306bdeb3a1cc73540a0008f081b250ae3cfa3c5ffc6e05fbd990d
-
SSDEEP
6144:1loZM+rIkd8g+EtXHkv/iD495hya43TwVJc6rrSDwb8e1mNCpi:XoZtL+EP895hya43TwVJc6rrSUi
Score
10/10
Malware Config
Extracted
Family
umbral
C2
https://discord.com/api/webhooks/1268791567746072627/TGSYJ1BE51HCcU6LJJz3OH-tosGjPcjBMrTssEQgZtRH56-_4Anx53qNAPhPWaH4DBUV
Signatures
-
Detect Umbral payload 1 IoCs
-
Umbral family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Wave.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections