Overview

overview

10

Static

static

10

69f81a0239...9N.exe

windows7-x64

10

69f81a0239...9N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    69f81a0239ba12507c8e9aec8e3d1667d230d38daadf50039b7968b2ca5e1b49N.exe

  • Size

    229KB

  • MD5

    cbbf1ff408089c98de723a2bd5720e50

  • SHA1

    a186fb0e8cb8ce8c65c473a07a42b9abd29d699d

  • SHA256

    69f81a0239ba12507c8e9aec8e3d1667d230d38daadf50039b7968b2ca5e1b49

  • SHA512

    92f1df204fd200685a90de370437c255520e33c66dd7e6e667985c14b99ea449d69709591102db0ae91fd35fef70a13c6dea02c3d5a4417b891befc60816f1ec

  • SSDEEP

    6144:9loZM+rIkd8g+EtXHkv/iD4giX9UgGhZq+fiQBFUuQb8e1mLucSUi:foZtL+EP8gI9UgGhZq+fiQBFUT33d

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1300923716687106088/zBYqs8nJ3MptGRgCn45okL0BWnQ0FdPIXStaaykk5DhZfBnHinW4M0Ve6U2CSPsMATf2

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 69f81a0239ba12507c8e9aec8e3d1667d230d38daadf50039b7968b2ca5e1b49N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections