Overview

overview

10

Static

static

10

test.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    test.exe

  • Size

    231KB

  • MD5

    82a3b8db52f0c9fa3a8cea6bf73c7ead

  • SHA1

    a386e95563f337c95bb612fd1bcae63da5079aad

  • SHA256

    b8976bb4f059c9886d2dc60a5dfb3be07cf88326b2638cfab82c7187f00df39e

  • SHA512

    21330c77c7cdd0e9f73d7d383e447804a9e60904a672e3dbb839f160d4f765a85d1f0baf7b162f34c75fe509516391565b8af2d5d0212ffb7cb16cb026aef450

  • SSDEEP

    6144:KloZM+7EBw/S6NtFnEPfCJxTzTfpaGJCJoGrruODO8emmm0B:0oZmYS6NZLTzTfpaGJCJoGrruOts

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1296513902951137350/w2AStBCTAzwGEtx8CUD9l3aIV1UGetuFqrgnf-01_7GXE1l3PPsJ5jo6UhsUOq3iRKee

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections