Overview

overview

10

Static

static

10

passprocbeta.exe

windows7-x64

10

passprocbeta.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    passprocbeta.exe

  • Size

    227KB

  • MD5

    4ba03d958d930223cdd9b50885365ddf

  • SHA1

    f111036fad34212ae876170478f57c8fb2e714be

  • SHA256

    6e1f345ac5ec917d43779e0087d731fbdf67645b7e74e83d63c7f21e82fb63aa

  • SHA512

    d1e655aebc11e00e7c23a1b37c75ed1207e5b007aaa1a595d18d1738e84c934225c164be507b4f561b8352abaa36294f4413e95d0fd7a6f230d6789a50fd0d15

  • SSDEEP

    6144:+loZM+rIkd8g+EtXHkv/iD4hn9vCg/7IjR0STTKqFb8e1mLi:ooZtL+EP8hn9vCg/7IjR0STTK+d

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1277669556155842652/dWmHHT2f5DvcgOeo78GdA9nR994OUR8OT6UhPMPzy0EAnFhUdEd5H5OV6KNqhZcADm3T

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • passprocbeta.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections