General

  • Target

    ccfdc56d44e882de28409431e7c52addcd5c569e7b96bf02cfbe25415954be3d

  • Size

    229KB

  • MD5

    4a89926d7875b20715aee8b91055288a

  • SHA1

    bc9dd5dd8c03ba61a00284597816da69b26d3124

  • SHA256

    ccfdc56d44e882de28409431e7c52addcd5c569e7b96bf02cfbe25415954be3d

  • SHA512

    a4fdd5dfd1aeef9335dc1b9cb70c0e38cd548ce0ee58c003ac2d1b6cc7193e4585a7c1283d4030ffb13909089c625e9f99f371d677228fad5f8319f2d8d71bec

  • SSDEEP

    6144:tloZM+rIkd8g+EtXHkv/iD4Zb++zZqSteY5rWWDPtbb8e1mQLi:voZ1L+EP8Zb++zZqSteY5rWWD1xG

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1271897933410734140/cl8lD_srSsBnAcQoK8aC1AX5F5CCQ6wifYTnJIabDBXuTV0fUjWev4BeIYRk0fzhqntV

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ccfdc56d44e882de28409431e7c52addcd5c569e7b96bf02cfbe25415954be3d
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections