Overview

overview

10

Static

static

10

20a5f718e3...bd.exe

windows7-x64

10

20a5f718e3...bd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20a5f718e30ebf604171a2e6c7b57fdd3affb5d1b3845920c12543fc9e8337bd.exe

  • Size

    506KB

  • MD5

    6f801049dc7c819dc80f015947962f47

  • SHA1

    427c1556b90aa70d3d1b3314bc88325ea30f4687

  • SHA256

    20a5f718e30ebf604171a2e6c7b57fdd3affb5d1b3845920c12543fc9e8337bd

  • SHA512

    d6dd99f5dcaa1717d36ab6f2ad17264416114b77750bfe90901f37bfabbd5ba2f54f43f356cf1e4db6376eb2b0a8850502ce6535f546c59799961241333bfe2e

  • SSDEEP

    6144:uloZM9rIkd8g+EtXHkv/iD4CGYhfVeGJdMFXSy3v7Igb8e1mSiZ:4oZOL+EP8CGYhfVeGJdMFXSy3vZUZ

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1275502153837838398/YsNK27WH0DB0tFxyB1u1EnPy6G9b_ATzsOE7FchNRWK3nlsLiWCT8GNYqMeNW8lbxZ0v

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20a5f718e30ebf604171a2e6c7b57fdd3affb5d1b3845920c12543fc9e8337bd.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections