General

  • Target

    Condo crim uploader.exe

  • Size

    231KB

  • MD5

    d9aa5d47970457518e7f2f9fbe245733

  • SHA1

    05b025859cffad39a0b7292de373eb9c57a96941

  • SHA256

    742a545012a6b530384b980e4c4b77369b53d656309605cb5b111374493a098c

  • SHA512

    71b152d622ff6461617f37338e14e10ae7330f3358881daf8eb999a4d01b2f63873ed80a89d1179ef4613e47b0878369a14cbdde575452585b5c4b380f43fd27

  • SSDEEP

    6144:RloZM+rIkd8g+EtXHkv/iD46TGMVjgULCyD1Ac52db8e1mti:joZtL+EP86TGMVjgULCyD1Ac5W/

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1271602814673621004/7D4_U4w7YJOrOSo_A_9lhGtVrM501rZZgsOc-WgbhBav7ayXyW9yjaP-IuG3JVLnIOob

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Condo crim uploader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections