General

  • Target

    Optimization_Pc_Twea.exe

  • Size

    240KB

  • MD5

    3ab1d460b16ec34493d9d769729a53fc

  • SHA1

    e7e379fb8d8390103e53c31f07a52dbd1bc796a1

  • SHA256

    3d33b7e8a8541de77e1428e6998cf1d77e1e3c7121ff42bb92285614db513bc9

  • SHA512

    37d59d665ed891832e3e8efd6b74116bb51230a69b1c5fff53e2aaf8eaaade4d807215dae3bbd26ec5812f8bae55f2d982e975d38c0d6ce684b5b2cea93f2949

  • SSDEEP

    6144:vloZMNrIkd8g+EtXHkv/iD4lx4+Clg8e1mbTi:NoZmL+EP8DMwK+

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1277937947240304723/e6aSIKSZZUhEGqX-EkfVX3BFZe9q4cDzASzi5ZjH0SMC7YexS-B3SgsSoakwIqMdOrMu

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Optimization_Pc_Twea.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections