General
-
Target
Image Logger.rar
-
Size
12.0MB
-
MD5
e6ed4f8836f57cb067d59c5c3bab83e0
-
SHA1
cf05b1644a0d9ad5817ba999c5fd2ef74ed20fa1
-
SHA256
69a530a9f6907b629a39ba9f9e77c9cffe2c3c4f1b1192f8acee7a99cf7106e8
-
SHA512
b3e23667a3ba95db64c6147de09700f3a545cdbec43047a1050b7942bf9b4a269f71fbe4e09799873b12b2a671b9d404276b5fe088941838cd9164e9d47d20e8
-
SSDEEP
196608:lREcqgDmKJp7LOIZuSokkVj9hwhRKmSZH/UuSRUIDxd3ObF2GD/VrQuG9:lREcqgDmo7qx3V7WEfUuSO8d34jdrQ7
Score
10/10
Malware Config
Extracted
Family
umbral
C2
https://discord.com/api/webhooks/1286410156086657135/y7TF20aVqx76GuDRgjns3cJ12jus9sZ45Frb_eNyqMyI_5W9_y_ZNBROkZh10eJnySEN
Signatures
-
Detect Umbral payload 1 IoCs
-
Umbral family
-
Detects Pyinstaller 1 IoCs
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
Image Logger.rar
-
Image Logger/Setup.bat
-
Image Logger/Src/Files/upx.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections
-
Image Logger/Src/main.exe
ba2fe82dbe3fc8bdddc26ef88c3ef15a
Headers
Imports
Sections
-
main.pyc
-
Image Logger/Start.bat