General

  • Target

    upx.exe

  • Size

    230KB

  • MD5

    de2d4e3d82dc91ee44c91793de896c7a

  • SHA1

    3b8db665d3666be6a4234c801b9ca93ced36655e

  • SHA256

    2744f1315bfa21aef381540d3ad53bc90cf15a8513905aba442b4610e8f0c337

  • SHA512

    6a257e6df13bd6dcc1452fa692515b955896f1141aad84110ceaad5a3a929607586c849bcfdb161d648e89c53d747a39e564551172fd36c1e440618346b7b40f

  • SSDEEP

    6144:jloZM+rIkd8g+EtXHkv/iD4Ff6Cj5nsAv7OXZkQlPJXb8e1mq/i:BoZtL+EP8t6Cj5nsAv7OXZkQllNq

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1286714539492249691/WGN7-dFwgZ0rCdSawTA_6w4aqFusamrpnEHJq2mpQA-uVYCCW9OCO2W1dKDE0JeS5MPw

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • upx.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections