General

  • Target

    uhm, uhh.exe

  • Size

    229KB

  • MD5

    0d407796194f47dd4739950f347631dc

  • SHA1

    2e843294cd4ccbdcb53b0ca4cdcb0d6640d75615

  • SHA256

    1ab54a5786eeedb01e74215a50a796fefbd12c47c0b864b1be5f6d45a2951bf4

  • SHA512

    b70550be02cc4b622fa35c0189884104a2b6719e8b593e156b74874cffc835a906df3b746b2247c2bffffbb47be6470ba3ac16cb2c8e163785f64650c43a4b97

  • SSDEEP

    6144:tloZMNrIkd8g+EtXHkv/iD41KaC9rI8j867NokRQg4db8e1mAG+Iwi:voZmL+EP81KaC9rI8j867NokRQgkC+Ip

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1271141434103169109/ZGzKrH_1KmFwmD5L6kWIR8gCyf2CGPFd_mKQUDOFv2JFuE-13CviLcUsxJZlpFmd_je3

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • uhm, uhh.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections