Overview

overview

10

Static

static

10

PesmobileGen.exe

windows7-x64

10

PesmobileGen.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PesmobileGen.exe

  • Size

    231KB

  • MD5

    f55b6dd676bb7064d38a1eaac5b08f69

  • SHA1

    f772349cd296f12d6399fc613c0c898696ac89a7

  • SHA256

    1563b6bc82b3606302ccfc90be5068858eaa4d7a9544fe67b2500228c707c992

  • SHA512

    251ddb5bcb67ae9e3699c237e49452afcc7335e12eae14fb2b5834b847fec3be980ba9c05f1568dad35e84245f157c9a67ee7b5551e7bfbeb6b1ea086966851f

  • SSDEEP

    6144:xloZM+rIkd8g+EtXHkv/iD4EMzNkqNlOQLWU1pAzg3b8e1mei:DoZdL+EP8EMzNkqNlOQLWU1pAzmM

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1270898251733663956/OPCvnSMz3KDXfn-5gLMn3HMcpLRLBKkmzt_nkzdAVMIJcY9H3pH5QSVD78gS0dTnsswq

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • PesmobileGen.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections