Overview

overview

10

Static

static

10

BootstrapperV1.13.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    BootstrapperV1.13.exe

  • Size

    231KB

  • MD5

    282abb0f0ec32631b00061b682a1d930

  • SHA1

    48497f3020dbbe6d1f74654d3df0995ccbee2f16

  • SHA256

    78f8fb8537ad3b8545788459cb6429ebbae3bfca197b6396bf197857789cc32f

  • SHA512

    1a90ccba732d8d4eb6db1b79c496c536f9021cc63a5202619fb7a133b06c61e5875df62c39a532230cdd1ab81c3a9d8b14d80f430925f05eb760a66d63f76ce2

  • SSDEEP

    6144:RloZM+rIkd8g+EtXHkv/iD4upqVKInDAHZMK7bCD+Qb8e1mipi:joZtL+EP8upqVKInDAHZMK7bCDT5w

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1267765281216794646/lx9j6q1Dzqb93V7znVQDCxb5MQYo-P_nPkX7SZyoUosbxCFbPkNDLm9ahT6TFD_sDEWT

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • BootstrapperV1.13.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections