General

  • Target

    d3764d7fe620e10d3e6004f41ff78e9a7cc7345683331568c9d9c2f62044c5adN

  • Size

    229KB

  • MD5

    de642c4fe0ab2d0d2c8029b5b9999430

  • SHA1

    fa60efdf7b935ca0fb389ca49b5ac3fc895c342a

  • SHA256

    d3764d7fe620e10d3e6004f41ff78e9a7cc7345683331568c9d9c2f62044c5ad

  • SHA512

    63a872451703e1e0f2fe43a3cc4a4bc48366faa81c7243f2e1b7196aab9e05fb7e6a154c87d601b7fd4dcf4f2b386ad5b7474bb20c7d24fd5e9c79c95ac30ceb

  • SSDEEP

    6144:dloZMLrIkd8g+EtXHkv/iD4VxCYhv0IHe2PxM4dtWMkb8e1mfi:/oZ0L+EP8VxCYhv0IHe2PxM4dud

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1300104721813475328/2DjXideE-kCgPyVTcym9w-AA5uw5aolMyk46Nvp9iRDFOrERaXI-1aZfyymVZskj98qm

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d3764d7fe620e10d3e6004f41ff78e9a7cc7345683331568c9d9c2f62044c5adN
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections