Resubmissions

09-08-2024 17:20

240809-vwc9aataqn 10

09-08-2024 17:16

240809-vtg5fsxblb 10

08-08-2024 19:08

240808-xtpkmsxgmn 10

General

  • Target

    Nowatermarks.exe

  • Size

    227KB

  • MD5

    926ac9e42778634f5c2580a913d83f62

  • SHA1

    e36c92f542a4c010c9cbbdb91df84ec2e16ac62f

  • SHA256

    4916686177420dca945e81aebaf2fc098c21ddb74fbbf9d0f6f2adaf37f218e8

  • SHA512

    e415af55a761d060dfd56f77491d853edb806c5e2337460fb7df8ac76f986e7a89904caa913b56fcbf19e0f3e084a71ef1a13336cf7aa73cdd52c342ff8375c6

  • SSDEEP

    6144:+loZMCrIkd8g+EtXHkv/iD475jhDJ6idOIJbGmTLFb8e1mYi:ooZZL+EP875jhDJ6idOIJbGmTJu

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1271181788311457842/_KRSDrxMDpDT4oPD3ryToXuvZ_BZWmh3fVQDMk6lnIe8xX48U6nAWKJ6cFF3-5ojFCxp

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nowatermarks.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections