Overview

overview

10

Static

static

10

123.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    123.exe

  • Size

    484KB

  • MD5

    2aa4f648d160439b834046fc7eaf4db3

  • SHA1

    7b0da6b64838ea63766e628893b8a08acff406f7

  • SHA256

    b34cce587000413f4f48699964dbf1cfcbb2718f0c7749196e1caf154743702d

  • SHA512

    d12de3fa54f2bfa81498c1301d957793095869d334d09dffe5be429e92bc2e064ad4a025da643164a25a499fa26ded267e08f847ce8c6b6b0a4242083d42e75e

  • SSDEEP

    12288:soZrL+EP8e/WB1DA0rgSjVg8ZWVo8kYFNLQd2nLyNz67:yI8wWB1DA0rgSjVg8ZW95MILyM7

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1278684969610252319/yBhsLJdMxB4CMKJHb-dAGghzSPAr0CHcCs4V4WXp7t2rrE6M1zTIuH-KHwgs32LoA0dm

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 123.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections