Overview

overview

10

Static

static

10

fn.exe

windows7-x64

fn.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fn.exe

  • Size

    231KB

  • MD5

    dd37f3db081031f72358bb3b9edf4e21

  • SHA1

    256023f67c0f6e3717d1e9a338187c33d16b6574

  • SHA256

    0a138d71d9cdd9c772628844181e087bc8f2f650e37702f131a32bf8d790867c

  • SHA512

    08f1776d67fbef2d4139031abd5fdbd953e8312d54563883b4c45df3dc4376356e24be7a84b47e20d6c9c20f771ce8b7fce4f8468c046743a77a7f4893dd812c

  • SSDEEP

    6144:xloZMzrIkd8g+EtXHkv/iD4lDkgJX8QfP+nJUg1Nvmb8e1m6Fi:DoZcL+EP8lDkgJX8QfP+nJUg1sQ

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1278009104844984391/WQYTiXWwE2wB32EMRcvvCF22EpLkuHXGox6HYy4w82do397_nC2dVs2fgwT5_uHRkYt1

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fn.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections