General

  • Target
    Primordial.rar
  • Size 8.3MB
  • Sample241015-apllvsxgpq
  • SHA256 3a2b81f84a4ed157b1a059be3046930972ee8480be3b67ebf15e9bbc941cf883
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • umbral

C2
  • https://discord.com/api/webhooks/1270399724431867935/HjClfkOVqhZa8ElKgkYuPRyoXVGf7yB2AqieOsUFaDEyif-Oe__Dw5TFjFKt_Mc4n-Dr

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Primordial.rar
    .rar 8.3MB
  • Primordial/FIX/README.txt
    53B
  • Primordial/FIX/fix.bat
    474KB
  • Primordial/FIX/libEGL.dll
    .dll 65KB
  • Primordial/FIX/libGLESv2.dll
    .dll 7.6MB
  • Primordial/FIX/libQt-Secret.dll
    .dll 133KB
  • Primordial/FIX/libQtBigint.dll
    .dll 221KB
  • Primordial/FIX/libcrypto-1_1.dll
    .dll 3.1MB
  • Primordial/FIX/libeay32.dll
    .dll 2.2MB
  • Primordial/FIX/libgcc_s_dw2-1.dll
    .dll 113KB
  • Primordial/FIX/libgcc_s_seh-1.dll
    .dll 72KB
  • Primordial/FIX/libssl-1_1.dll
    .dll 924KB
  • Primordial/FIX/libstdc++-6.dll
    .dll 1.5MB
  • Primordial/FIX/libwinpthread-1.dll
    .dll 46KB
  • Primordial/FIX/opengl32sw.dll
    .dll 15.3MB
  • Primordial/FIX/qtquick2plugin.dll
    .dll 55KB
  • Primordial/FIX/steamfix.dll
    6.0MB
  • Primordial/Primordial.exe
    .exe 231KB
  • Primordial/Primordialwin.pdb
    97KB
  • Primordial/cfg/legit.cfg
    39KB
  • Primordial/cfg/rage.cfg
    187KB
  • Primordial/crack.pdb
    175KB
  • Primordial/injector.dll
    225KB

Primordial.rar

  • SHA256 3a2b81f84a4ed157b1a059be3046930972ee8480be3b67ebf15e9bbc941cf883
  • MD5 SHA1 SHA512 SSDEEP
Password
2024