Overview

overview

10

Static

static

10

nitrosnipr.exe

windows7-x64

10

nitrosnipr.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    nitrosnipr.exe

  • Size

    229KB

  • MD5

    0dcc2299f5e6a41c04593b9e1d8fb825

  • SHA1

    6d5b2580da6616d958f721c82241b52821dac5a1

  • SHA256

    a820aa027bed73820a45f380eb8858bc6c24dcce2ed9bc2bfdc4b7ecc54ba7e7

  • SHA512

    f6553276f07988aae7a7232c3f98447a7883f1b87c1a85955909e7374d8cd4bd08b923395283c0115d5cb123f287f3938d02c2700ccd264ae78f9f771df35920

  • SSDEEP

    6144:tloZM+rIkd8g+EtXHkv/iD40H9txd58e1mUtbi:voZtL+EP8MHxDnM

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1284331415886102568/N2tf6_mTq84gsH53FdCWJR8H0Xf-6qvm8lG0GmsORl9dLRkzSObvd00piUvVBlEj6_6d

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nitrosnipr.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections