General

  • Target

    Umbral.exe

  • Size

    229KB

  • MD5

    30ccfee6c8e2ebc782110e8aa1a4c8ba

  • SHA1

    392871b1e3628da65161b2dfd40da407939071ae

  • SHA256

    e22e92f946d1914fe0557fdbd725c8199651f571e9b160ad2f59571a308147b0

  • SHA512

    8cec6d2f9b5f60006adefb820225c56add9da2b50f2f3de58481ebbcbed9a859b30a4e9dcba57112f142fc63e24652ed962146c564635c88af12d0a998c390bd

  • SSDEEP

    6144:9loZMLrIkd8g+EtXHkv/iD4CkUeRa43TwxJc6rrSHfb8e1m4Ki:foZ0L+EP8CheRa43TwxJc6rrSbp

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1325458256612687883/LdnxAjFB_1VpbzrSvMpWrsQHqJlCOeQGtlZtNBGOB797ZTlKsuDtoSjo8vXIPSdLrhIZ

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections