Overview

overview

10

Static

static

10

20a5f718e3...bd.exe

windows7-x64

10

20a5f718e3...bd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6f801049dc7c819dc80f015947962f47.bin

  • Size

    117KB

  • MD5

    853dc1d674bff740ced2ada5a354973a

  • SHA1

    8a5a3a20cdffe8b683491378a52c22744a769f9f

  • SHA256

    68df11ba8f6db56ddf29a0ef7ea38663342375e36abb0b2924fbc974acf7b15f

  • SHA512

    8c78a8890763836f65540ef854e12cb2d719a50d2c90919084c55ab8986aa49d3d64031dd5e7c24f5e4af957dd730fe17a1634d2aee7fb607761dcba4adf23cb

  • SSDEEP

    3072:riFj/DQH36H1Kirx/zCIQjEGKwOxYv5o46QlG8pnktILVw:GV/DA8RRCAHw4o5o4X4EsILy

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1275502153837838398/YsNK27WH0DB0tFxyB1u1EnPy6G9b_ATzsOE7FchNRWK3nlsLiWCT8GNYqMeNW8lbxZ0v

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6f801049dc7c819dc80f015947962f47.bin
    .zip

    Password: infected

  • 20a5f718e30ebf604171a2e6c7b57fdd3affb5d1b3845920c12543fc9e8337bd.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections