Overview

overview

10

Static

static

10

Umbral.exe

windows7-x64

10

Umbral.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Umbral.exe

  • Size

    232KB

  • MD5

    37974e87e6ab2f57a45f6a59f774d5a0

  • SHA1

    af8b0ce0a30c70f23ec081cc9c713f200c931241

  • SHA256

    d49509d2f27099e6884319fc50b7cecd8cf837ef1af03d9516a558e54bc7b8e8

  • SHA512

    1f17d68a77894f28ab09fbec5d9f499425523512de19b81829dda7b613ddd7a2fadc937ed3933f28048a45cc678a79813ad0e767f6585f60286fd45db44f6344

  • SSDEEP

    6144:IloZM+rIkd8g+EtXHkv/iD47xX5kuMzvE5lwOffumn/x0i8e1mi5i:WoZtL+EP8795kuMzvE5lwOffumnrpg

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1289114395871412300/0iCMqyg2_DeWYKwptdJz9Esfw_fTNZHnZrY5jnPzsK-oQVEMZnCBGS8p4EiLLZsDIdCf

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections