General

  • Target

    BLUME RUST.exe

  • Size

    227KB

  • MD5

    de788e456ceac91e1dd1a2ed01d332cc

  • SHA1

    d0a59e876e3781b70379127425612c9cb1a99436

  • SHA256

    559a3d56b0318e3e66e68e92079a8fd4f04adb5c6c3899d06b4ad66cccc19cdd

  • SHA512

    41daddd8548376e9c6f161c113c7a7721b2c683aa361dcfb4341906e45f78ec053242fb2a221b622e229c4967f04c04d7a4e3436cc4fddf2054db3e9907d2b6a

  • SSDEEP

    6144:eloZM+rIkd8g+EtXHkv/iD4cwuciAfboNxUyzzqlUob8e1mKi:IoZtL+EP8cwuciAfboNxUyzzqVE

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1292064398843838465/uJLm49C967pwghATBRrp1VCPK6X15QMecuGHwZJ0OUcg9AHlMguTUK5KDhrrkGJmQDiv

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • BLUME RUST.exe
    .exe windows:4 windows x86 arch:x86

    Password: asd

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections