General

  • Target

    SupremeVip.exe

  • Size

    231KB

  • MD5

    c824211fa3c507fee0dea2c75eb0fe53

  • SHA1

    8f43608f64d43b91014c371d484adbe7af1cc3e5

  • SHA256

    83fad99df9cf86912dcc087e5936d7643cba31a82fad2c03fa3efcbd9bbff59e

  • SHA512

    d318d6d7e4010d6df403a6423280104067c178e73ba06691c7739bc164eb5583e0a6114e88c2c67700666730f7fedb8c505f6dd2bf8f0e0cd1ff75dd5c2a08fd

  • SSDEEP

    6144:RloZM+rIkd8g+EtXHkv/iD4ec6piAfboTxUyzzqLuQb8e1mJMPi:joZtL+EP8ec6piAfboTxUyzzqDFa

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1318967515556216914/uT31LZVFolMqiCb1yniFGZeuzzN2PI9C87EmIEyk59rUkDSrmKlU6HbMzsTSJa2dWOb0

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SupremeVip.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections