General

  • Target

    vJxj.exe

  • Size

    227KB

  • MD5

    945f3e693c8465494fcb4d208498b4c2

  • SHA1

    8750e7c46ba29ddf303ce39a00b915317c6695b5

  • SHA256

    492f241ed1af18331729e305f0c4943366cc399532898554f7169571e34fa2e2

  • SHA512

    be19a393984e5699170f094c33c2876708d6d8f58910c40b0ced63e5b07bb72447dd6c7bda64d53a5b6b60ecbe1f5afd23e5c32f24efddf775bad839f0c3869e

  • SSDEEP

    6144:+loZMDXU9Zx0kt8X0/PSCsMmp+LSQPL4eBECDjaTC3b8e1m7i:ooZnf0kkPzp+LSQPL4eBECDjash

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://canary.discord.com/api/webhooks/1318187599499624529/392m_fSg3L-8l8reFwCm0wtrkfQw5MU51p7maoLRwJXOEUKy4rdUcSw4xShjUwdIjAge

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • vJxj.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections