Overview

overview

10

Static

static

10

Rust_Kfg (4).rar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Rust_Kfg (4).rar

  • Size

    218KB

  • MD5

    24e5ebcc022f0735f35737a8dc358b75

  • SHA1

    b820dbecbbcb565365557a9d16aed97622816f8b

  • SHA256

    5792e2d18bf6bb75708a630b4bd2d5bd56992dac49aef6e37ce194d7229346a0

  • SHA512

    8de8b3fa6b7e30e5a38778a9c547109d9562179f9e3b610a25af62d10dba6511fcbc87cc4de963f0a807bef9372f1cc2525071b8203061f3ea8bfa6a4fc572ac

  • SSDEEP

    6144:/a/EIYhHdteaYHJxzEKOKE5myFELElV+bczVnK:/KYBHQJxz9OVsLElV+r

Score
10/10
umbralxworm44caliber

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1276982380623822909/-ZYqYnZeoG8yutLtDD9buwOWh8z-ENLfgSoEesmu5LYvfPnRgh3KuZ2RXTmQ_aGzc_7m

Extracted

Family

xworm

C2

127.0.0.1:59668

21.ip.gl.ply.gg:59668
Attributes
  • Install_directory

    %AppData%

Extracted

Family

44caliber

C2

https://discord.com/api/webhooks/1276982380623822909/-ZYqYnZeoG8yutLtDD9buwOWh8z-ENLfgSoEesmu5LYvfPnRgh3KuZ2RXTmQ_aGzc_7m

Signatures

  • 44caliber family
    44caliber
  • Detect Umbral payload 1 IoCs
  • Detect Xworm Payload 1 IoCs
  • Umbral family
    umbral
  • Xworm family
    xworm
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Rust_Kfg (4).rar
    .rar

    Password: 123

  • Fix_Error (2).exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Rust_Kfg.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Дополнение.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections