Overview

overview

10

Static

static

10

Umbral.bin.exe

windows10-2004-x64

10

Resubmissions

18-10-2024 16:40

241018-t6hfbayhkl 10

18-10-2024 16:37

241018-t422yaygnm 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Umbral.bin.exe.zip

  • Size

    94KB

  • MD5

    ae322f488885d2273b3bd43caec90f8a

  • SHA1

    dd2f4301dd681e87736cb29ba529e02c58239fa1

  • SHA256

    3eab204e57a51e54418bb1b51a2bfff7ba4b0478ee1625dbc9f49681af9812a4

  • SHA512

    2df4b92fe93438df1af53ca08978f36fa705c24c05dd380f808f0a4cf630c90d989880631a569f4ab52fcb919fda20e1645a9f42220dd2bf880d3236fb816b50

  • SSDEEP

    1536:2P1k+P1H3psV9p21kQ4kGFjQiN1EqcsOMiSoobzme9KCpTPWwLHWWmjPtGioJ44T:2Pq+Ptps01kr1gqFmbCUw7WWAs

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1292553414680514621/qkfR1ob7Kv4fi78hXnWXivlpIWfUCKlh6JX0apuJc9KpTbIjTqbRXxI0p4FJkCT5lWk5

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral.bin.exe.zip
    .zip

    Password: infected

  • Umbral.bin.exe.bin
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections