Overview

overview

10

Static

static

10

tempspoofer.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tempspoofer.exe

  • Size

    231KB

  • MD5

    32e16912b2393c29fe60bbd22ae78e48

  • SHA1

    cc08bc0e843139864445f703dba130956c605be0

  • SHA256

    3df7f52703498423053930ac726878d23436a8579ed46ef247391c2b2536c596

  • SHA512

    f70da345c4345293b87a8b5f49d419b1cfd53e1dc9e30f8d50d97a2d6d84fb55356acdabd0df828ab57a22add86786207624048afd490b196ee9f05d6462a340

  • SSDEEP

    6144:RloZMMrIkd8g+EtXHkv/iD4oxXVoOJBiPHaIJtME/lb8e1mBi:joZbL+EP8oxXVoOJBiPHaIJtMCH

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1316505713056546948/47CKEm_8IYGcvo5LYUmMAWw_olYRtKOkYQmvQ6Q3Y5Sqzc_J6URjAi1o2b6JznoUsQWr

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tempspoofer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections