General

  • Target

    fkgDa.scr.exe

  • Size

    227KB

  • MD5

    57725f9d6fe867414481c9174b761df1

  • SHA1

    498f57a097747aa80a83a2927a74d96c007028c6

  • SHA256

    f29f169e410ccc847f78e8df47006a45025ba10f0d517629f80ad73995d614fd

  • SHA512

    28de892b39cfb8e534c8bec5c2a8f277adb006499930fc6cf00251b5f157033d856dcb41dbc80375a61dc7ffe9eb109e1e00cbc42972b2202f8348daac7b6586

  • SSDEEP

    6144:+loZM9rIkd8g+EtXHkv/iD4UcHZLxCqVUQhTuOLdG2Hb8e1mB1i:ooZOL+EP8UcHZLxCqVUQhTuOLd9Ec

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1275486097744597052/DtRIVGRXq9EbCOLuFG54p-sV2rFhTNQaPmROPZ12uQi4zP31iRoNPEVEdATCJBi9SiEL

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fkgDa.scr.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections