General

  • Target

    BoogieTool.exe

  • Size

    229KB

  • MD5

    a95d6f4a4315650e730488eabbe1a5dc

  • SHA1

    dd8358dceb4125cbcc85c2d18721a2ef1aa5b165

  • SHA256

    3b97b49496b1d19bd7fec189d26ba0e5ff3051eb759e48cc02c934aceb7868ee

  • SHA512

    b3a1822d4426178ceae2ab76597bf072c41cfa374141bc7adfb01dfafcfc443a713d1526e800290afd265cd932ec756235ffde880cf5ab6fd858b2adf1ed619e

  • SSDEEP

    6144:tloZMYrIkd8g+EtXHkv/iD4yfqmR/k4XoG/BcoNNKb8e1mwMQi:voZHL+EP8yfqmR/k4XoG/BcoNAKJ

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1278435495386415144/D2YISSJfaIXLKS4nLo5qAMET1JA7XbkE1D57Ec4MyiruKT3zr5BWWoNDA4lobqjTbxcX

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • BoogieTool.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections