Overview

overview

10

Static

static

10

citizen.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    citizen.exe

  • Size

    231KB

  • MD5

    8fcef0c1c33c1f00b585f79e484a63fa

  • SHA1

    57eaedd0de6fc7b965a6b132cf23380076e63336

  • SHA256

    dc2a8b1f1aec321b087018c6177a9a6478d3ee10b04ef0ed525e3b33206ea3fc

  • SHA512

    ab422374c0f26ce2834b3738d7c4611f214ebb7090f98b7aa92bc1a7a273ead93186013268b5c15878f0df9c075c870ff9648001efc3f9ec03951d83df820fb0

  • SSDEEP

    6144:RloZM+rIkd8g+EtXHkv/iD42i6kgGhZqLfiQBFUAjb8e1mAi:joZtL+EP82i6kgGhZqLfiQBFU+e

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1320454676080103465/W6LdShCFhm1tqQOZ7F78sDgYM-wcYax6bTcou8_CxzWljm8rXr7REB-KdFUQR_9zggA7

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • citizen.exe
    .exe windows:4 windows x86 arch:x86

    Password: ا

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections