General

  • Target

    octosint.exe

  • Size

    628KB

  • MD5

    b4effaa19b06eb4a92b66b0ff2702c91

  • SHA1

    703aa3cec640517f6e51033c27bef4bbeb9afe9b

  • SHA256

    2464cc00fd3a0e7b5fd2e171e967b2ef65fde94bff68dda2dab12e2b9dce108d

  • SHA512

    d7e379b2148dc4697e7cd1529ef88bc5386f66df992afcb4423b4f24a7402b18531aee341c3dc22fe97d37583d7856a13cd1cdbeb341b042f0b547f485e09cd8

  • SSDEEP

    12288:2oZtL+EP8GwI8EKtFu9r20VJg2VFRiMdRC:qI8fI8EKtFu9r20VJg2hiMdA

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1312316482243395674/CDkI6IYU75yTK5pEycJanJbjsbPzw6RgBf66q4IBGfhFOO-3MKhxAx0JU_T7bQvERqBt

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • octosint.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections