General

  • Target

    ef2720e1c481bda488e8c2443102be2c4ef89bd1a8639c95591ecfa658c79074

  • Size

    229KB

  • MD5

    7722bd38c1dc5357e24a8e33241b7609

  • SHA1

    b4001c1953b0cb3e7acf2d6009342390f5e42724

  • SHA256

    ef2720e1c481bda488e8c2443102be2c4ef89bd1a8639c95591ecfa658c79074

  • SHA512

    215829e0897f1027944421cc2a2ed1122ab3fd8f1dea84631e7d22b27d9a7e61c0316f62762bfa90feb0dabec1e5389bb1b0b8bcc80b58b34cd910b2b52e5e86

  • SSDEEP

    6144:lloZMQfsXtioRkts/cnnK6cMldA1GgGhZqZfiQBFUbGb8e1mji:noZItlRk83MldA1GgGhZqZfiQBFUup

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discordapp.com/api/webhooks/1208093907007578153/ARZ7Y2yUFUJOQghfW7hhB2n_e50O6KHNwOzCf82xlsGIdB5741tX02jF0LEtXTTZg5e-

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef2720e1c481bda488e8c2443102be2c4ef89bd1a8639c95591ecfa658c79074
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections