Overview

overview

10

Static

static

10

GTAGLoader.exe

windows10-2004-x64

10

GTAGLoader.exe

windows10-ltsc 2021-x64

10

GTAGLoader.exe

windows11-21h2-x64

10

Resubmissions

02-11-2024 20:47

241102-zk65faxqfq 10

02-11-2024 20:43

241102-zhqpnsvemg 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    GTAGLoader.exe

  • Size

    229KB

  • MD5

    18cb3d1a221a079d9b499f2eec3a3e64

  • SHA1

    5fb17f7e655b5cb79be1099c8ea550ac1f5ace1f

  • SHA256

    e22bde6d04787794012e7e12ceaf1cf8fdf145f81551d90febf6a4f9c5d4e029

  • SHA512

    ca4fdb1e0bbf0d63667d5faa71f691efa4f1a629ca391665d0c361ce84876fc2fd0962b3a2c8bb8735e09931cc4401f912dece4e43f325fa8fe56b5c24630b03

  • SSDEEP

    6144:lloZM9rIkd8g+EtXHkv/iD4uNKIkqNlO+LWU1pAOqb8e1mSi:noZOL+EP8uNKIkqNlO+LWU1pAxQ

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1302369349960597544/nRF42pkmRbq0sIVg4AoYuJ8KE5OmNwC1-6AS8FiBKHtRDj4bXpn_q6WSjWZJIRfF3Mbf

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • GTAGLoader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections