General

  • Target

    Image Logger.rar

  • Size

    12.0MB

  • MD5

    bf5f0ec29018b7d713352805d211a707

  • SHA1

    35919edd98fda6612dc5c1e5e6cdedc0900bb9a1

  • SHA256

    e73bb9abd07a3075baacff2be37bf9b32bc612de7e03af85ef4d51ff7b494e94

  • SHA512

    7061b438b13cc0b2eb3d45b241833954067fd9e345418f610ee9d78b7c5774e78fa6c1f7522b3a468888cb8088edf93e1f4ba6113e5f8f4c13d4acd3109f52dd

  • SSDEEP

    196608:qDREcqgDmKJp7LOIZuSokkVj9hwhRKmSZH/UuSRUIDxd3ObF2GD/VrQuG4:0REcqgDmo7qx3V7WEfUuSO8d34jdrQS

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1282684334083674163/14oc769qwp-7q89dT2gExNUqJTVIjFCuQrE66NDv5VnCgalUJDArvZ32Ho6PZNuQNrB7

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Image Logger.rar
    .rar
  • Image Logger/Setup.bat
  • Image Logger/Src/Files/upx.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Image Logger/Src/main.exe
    .exe windows:6 windows x64 arch:x64

    ba2fe82dbe3fc8bdddc26ef88c3ef15a


    Headers

    Imports

    Sections

  • main.pyc
  • Image Logger/Start.bat