General

  • Target

    Insta-Checker.rar

  • Size

    12.5MB

  • MD5

    c864c6ebc454038b621f3bc8e7f95e39

  • SHA1

    b1300ab696a8bbcf9b298b077a64dc9c009bd4b3

  • SHA256

    964a54a737831c42dbd01e9dad0032ee2431cd67d3b2876efa10dd7362385388

  • SHA512

    c42779e89a8e8d8249c2bf70aebdeae2d18a70e331db33a49396aae9ab27515c84b4879f228b8ca46070e3311616a0bacf5f24c272eb5017c2f396c351588ecf

  • SSDEEP

    393216:j6FSmKUd1aoRX7gJ1blsrJh/WoKncv2TJdC:j6FsUdr7e1blIuoKncvaJdC

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1311853028680400957/msEao2pygwFSejk9GVaCuiS6YFPyMErZ4uLPA42C6h_TCBboJi6x98y5-EcCuL9UYch8

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • Insta-Checker.rar
    .rar
  • Insta-Checker/.git/HEAD
  • Insta-Checker/.git/config
  • Insta-Checker/.git/description
  • Insta-Checker/.git/hooks/applypatch-msg.sample
    .sh linux
  • Insta-Checker/.git/hooks/commit-msg.sample
    .sh linux
  • Insta-Checker/.git/hooks/fsmonitor-watchman.sample
    .sh linux
  • Insta-Checker/.git/hooks/post-update.sample
    .sh linux
  • Insta-Checker/.git/hooks/pre-applypatch.sample
    .sh linux
  • Insta-Checker/.git/hooks/pre-commit.sample
    .sh linux
  • Insta-Checker/.git/hooks/pre-merge-commit.sample
    .sh linux
  • Insta-Checker/.git/hooks/pre-push.sample
    .sh linux
  • Insta-Checker/.git/hooks/pre-rebase.sample
    .sh linux
  • Insta-Checker/.git/hooks/pre-receive.sample
    .sh linux
  • Insta-Checker/.git/hooks/prepare-commit-msg.sample
    .sh linux
  • Insta-Checker/.git/hooks/push-to-checkout.sample
    .sh linux
  • Insta-Checker/.git/hooks/sendemail-validate.sample
    .sh linux
  • Insta-Checker/.git/hooks/update.sample
    .sh linux
  • Insta-Checker/.git/index
  • Insta-Checker/.git/info/exclude
  • Insta-Checker/.git/logs/HEAD
  • Insta-Checker/.git/logs/refs/heads/master
  • Insta-Checker/.git/logs/refs/remotes/origin/HEAD
  • Insta-Checker/.git/objects/pack/pack-138d657c83757aa74bc8669ea23a44606ed8df08.idx
  • Insta-Checker/.git/objects/pack/pack-138d657c83757aa74bc8669ea23a44606ed8df08.pack
  • Insta-Checker/.git/objects/pack/pack-138d657c83757aa74bc8669ea23a44606ed8df08.rev
  • Insta-Checker/.git/packed-refs
  • Insta-Checker/.git/refs/heads/master
  • Insta-Checker/.git/refs/remotes/origin/HEAD
  • Insta-Checker/Data/Jint.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Insta-Checker/Data/Leaf.xNet.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Insta-Checker/Data/Modules/Jint.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Insta-Checker/Data/Modules/Leaf.xNet.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Insta-Checker/Data/Modules/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Insta-Checker/Data/Modules/instachecker.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Insta-Checker/Data/Modules/instachecker1.exe
    .exe windows:6 windows x64 arch:x64

    a06f302f71edd380da3d5bf4a6d94ebd


    Headers

    Imports

    Sections

  • Checker.pyc
  • Insta-Checker/Data/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Insta-Checker/Start Checker.bat