General

  • Target

    e07fd0ac793b06603be164c9ee73465af512cf17bed07614cbcd2a8410f04eedN.exe

  • Size

    229KB

  • MD5

    1e10af7811808fc24065f18535cf1220

  • SHA1

    65995bcb862aa66988e1bb0dbff75dcac9b400c7

  • SHA256

    e07fd0ac793b06603be164c9ee73465af512cf17bed07614cbcd2a8410f04eed

  • SHA512

    f1c623918a3701254805e7648d671b316446a0f98637d3de62d44331cf91502afb57ccb762472491bc4ac037fbf5f7b624eb9d39092b3be0b2ed84da6f3acadc

  • SSDEEP

    6144:lloZMQfsXtioRkts/cnnK6cMldKRn/1+mpnsl3ySXCkb8e1muhi:noZItlRk83MldKRn/1+mpnsl3ySXze

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discordapp.com/api/webhooks/1310580388070031360/HcT5cAwFckSLk1OKu346uVDw7gzPyJJvcWmU8BKJrBQSUsE3Q1GCqDtVn5MK3JlldJBn

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e07fd0ac793b06603be164c9ee73465af512cf17bed07614cbcd2a8410f04eedN.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections