General

  • Target

    atomic.exe

  • Size

    229KB

  • MD5

    05f1e261fdb236fd899a48d71a5f33f1

  • SHA1

    6a0399a6a8417616f5fd72e075712a54fbde4a6d

  • SHA256

    15e734a6600467bdf53fb3e997151562f25797baa8e5688036240438a96ca1e1

  • SHA512

    f637b0c54c8223a41961274cabe34e1d9b23e351e6f78658617785d53785e31ec33bdef700d7257ca9667420fafe6ec556d210fd5cf1f11d03b1b7443b923212

  • SSDEEP

    6144:tloZMLrIkd8g+EtXHkv/iD4H4jwT5KyNo4ZL22jx9b8e1mrgi:voZ0L+EP8H4jwT5KyNo4ZL22jz2

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1295100259101310996/NS6fhNZm5DSV0fiK2qgIelgdlX55DNAj9Ri9S4FVxmg782vpz-tRPZkMk5wT2PXlm2y4

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • atomic.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections