General

  • Target

    Fizzy Loader (infected).zip

  • Size

    88KB

  • MD5

    bdd562f68e39fcce44902713a1b74aa0

  • SHA1

    7a3e8189c5f040435f5ba3423959dd1de5bd1771

  • SHA256

    dcd2165bc18a4476c887c7e62358ca63cb3d3b3425b0ee09acd362d1972a679f

  • SHA512

    611c312a6638476a08a9063131b9477edc17bc6566a0cfff3f4fbf68dd38aec837160dc679615886657e0ce3ef137b40774aa671e2340366027611ef5a2bb30f

  • SSDEEP

    1536:KpLn43go769Trdlt+gvRhZ+UOSJKgzHC8iSqB83kJQwzwoMW9TkNTpZ:KpL4QDdlWUOSeYbwphkNTH

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1323224754576166912/ngAQr5IRg8PVqlg_GePwPe46g-WcVmFR7-gQu1RH44lVF1JX9hv6jSy8rNgxBAU6LxYx

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Fizzy Loader (infected).zip
    .zip

    Password: infected

  • Fizzy Loader.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections