General

  • Target

    midnight (1234).zip

  • Size

    138KB

  • MD5

    d6887c50a19ddf4160195a84017cbec7

  • SHA1

    0e443176b3091a05da329c05c509fc1a412087d0

  • SHA256

    f97488ee0b0f23efa8ce589d1e3456e575fb3b1ac938349b82c7d3aaa63e8e50

  • SHA512

    956d56bb4469caaa1658233d59d327fb09a8a09dafe2af36537b2128deb4536a9c40d5b364f96bf006fca9832bf10491cfff22ad32ae7cba7dd0f2f37b0431eb

  • SSDEEP

    3072:VLxP/oE8EIXTcylXkojCS9x9eEXy9o3Kpr8CxLv7L:FxP/oJDJlUcCS9x9evG3KpvZ/

Score
10/10

Malware Config

Signatures

  • Detect Umbral payload 1 IoCs
  • Detect Xworm Payload 1 IoCs
  • Umbral family
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • midnight (1234).zip
    .zip

    Password: 1234

  • midnight.exe
    .exe windows:4 windows x86 arch:x86

    Password: 1234


    Headers

    Sections