General
-
Target
rawr.exe
-
Size
227KB
-
MD5
a91205f6727f1c3b2f6383b90a364ed2
-
SHA1
f8ee36a1cffba6d008f3db793d73c661e798ab3b
-
SHA256
e9f53a85ccc391f38f8e61a652f9bc828ba30c5716cbb20a279997f47332739b
-
SHA512
feac77579bf151f91ec897a684929ad8b5897a575a45081b27d583c027343f96590a20ceae0662d11cb8ac2df36041ed2a7f9422662cfdcf4cf555649464c36c
-
SSDEEP
6144:eloZM+rIkd8g+EtXHkv/iD4x6ek8il92hDe8NhoNl+lj8e1m1i:IoZtL+EP8kek8il92hDe8Nhoapx
Score
10/10
Malware Config
Extracted
Family
umbral
C2
https://discord.com/api/webhooks/1268794193321525280/-MtzATHm9H0Ql-oJM2T2M9v_32vsSpeIbom8dQQF9ax-tXdpjKHa9b68xGcy80W5k4pa
Signatures
-
Detect Umbral payload 1 IoCs
-
Umbral family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
rawr.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections