General

  • Target

    Umbral.exe

  • Size

    229KB

  • MD5

    50bc3bab2a3553f7b55fbc5a6fa1275f

  • SHA1

    83f6672fee979dec40ee154519c9cd7d3aa79bb4

  • SHA256

    f3073b18151ae854112999b803ef10b70447d908a3cb0b2c27e91740a3fb2370

  • SHA512

    a0c0b1d7b2e9dae8c1e4315b2002eaf2caddd3639986f053f3874e7e7c715e60d20f4893d0b456d7289503146ace6fde934e1f807b5483ff28a592bfac55d150

  • SSDEEP

    6144:lloZMHrIkd8g+EtXHkv/iD4SZ+lTwk7+iTlwsJOhK28e1mmi:noZIL+EP8SZ+lTwk7+iTlwsJIw

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1304869873616158792/oC9aHmFlv9ZgkIDRefrcCbX3_k49Jr7drOR1znBQsU6LxlU1xlLRxaATv2EJOYZ9eqal

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections