Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Nitro Tools.rar

  • Size

    82KB

  • MD5

    7460868214131fe4bc500c47c5f4b2fd

  • SHA1

    b3e620e61b573737e26eafc0b42588227802722d

  • SHA256

    4adaffe46ccae1425c54b81f87fcb56b7f66760b5d5f0ae3328e72c934bbb3c8

  • SHA512

    3c2f5f4af969997b8939222daa16010435e97e57da110b64a61e13bc3d8d32d54bed31478bc0fbec8479c143b1d4234b43c9d8814c473b5e29f95c690cccc94e

  • SSDEEP

    1536:WQ5EgwfR8sOVflllq9yZvBX1xKjFogPrU+b2zajL:WQ5NwmHVflllq9yHFxKjnTU42z+

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discordapp.com/api/webhooks/1281243540256591944/Hvm3cR-qlME8rmsZEzAd9Bcccgxn-2QEXALCjrbq5rrzjv2Aw7afNK5Xd_8l5UgqnCuL

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nitro Tools.rar
    .rar

    Password: 123

  • Nitro Tools.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections