General

  • Target

    d97cfbdcbd68d0080286dde7cb1906e84c954d5471f08ba98608c5f3b6af3f2d

  • Size

    230KB

  • MD5

    553d6d65dbaee07e841b22b0987c0331

  • SHA1

    499325af4eb554638411e3e47b146cc8662f693a

  • SHA256

    d97cfbdcbd68d0080286dde7cb1906e84c954d5471f08ba98608c5f3b6af3f2d

  • SHA512

    e4b3c0b1211ce292eb7a781e98da5960936e28abd84f473c66105217e9de505f89fee1b46ac776953403d0aa433d47226c3f0b6dbfd5dd3cc7b4a44058964e96

  • SSDEEP

    6144:dloZM+rIkd8g+EtXHkv/iD4mEHhtxds8e1minfi:/oZtL+EP8Trx86

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1273654743541219463/LiRtpjZrXJ-Jq6D6rmaHPRqkGmJ-O6FGNmo8-PwElrHuhnARicowKD2I8Ei3JuuXkhNp

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d97cfbdcbd68d0080286dde7cb1906e84c954d5471f08ba98608c5f3b6af3f2d
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections