Overview

overview

10

Static

static

10

NerestPCFr...ed.exe

windows10-2004-x64

10

NerestPCFr...ed.exe

windows7-x64

10

NerestPCFr...ed.exe

windows10-2004-x64

10

NerestPCFr...ed.exe

windows10-ltsc 2021-x64

10

NerestPCFr...ed.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NerestPCFree 0.31.1 fixed.exe

  • Size

    231KB

  • MD5

    08dce587975cb4a6cb1333bd7d3aea6c

  • SHA1

    4c855f6bb5cad027522d0a063cb4f1cd6e97b163

  • SHA256

    0c6e6a1c2c50a0a1ab3f74ea0985e14003921c3b7f4e427b56c7673439accb8b

  • SHA512

    19f21d6f976a971f4bffbf74a7b6450ec6b6ec02d837422a5c5edbd3fb825e630642e4b840e181484a2e0e47997631ad7012f1f710aa098538164c8998592f81

  • SSDEEP

    6144:xloZMCrIkd8g+EtXHkv/iD4LsUtt74szYKrd4UBr8b8e1mOoi:DoZZL+EP8LsUtt74szYKrd4UBAJ

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1316459606511321098/TvHF2Wj_8rIbJFWgoWfea3yBq7EFCAkU4H1E9qXeP8ohhCK3zdFFD7JhEg6NKy3UEaq9

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NerestPCFree 0.31.1 fixed.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections