Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Rich Executor.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Rich Executor.exe

  • Size

    285KB

  • MD5

    16784b440d687c01015d992d63908bf8

  • SHA1

    49f6cd11f32f093329e8fde5d710c3fbe41f3c7d

  • SHA256

    da9b33d28f4984317ffacf61df2b1b975e09babbec5c7ef8d0ec91ad3eb810f9

  • SHA512

    d29bda5ab0b4e62a263eb77a76081e705624f2a93c2d1f7730805df409777f3eaaea6673b65e45f3e63b0f3e56bc7938a861685e6b73452097e371022eff981f

  • SSDEEP

    6144:6loZM+rIkd8g+EtXHkv/iD4xiNArRiK1XwBzOurfkb8e1m9izE2HV:EoZtL+EP8xiNArRiK1XwBzOurM79

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1329227551364612146/MjioVS6yEMfAvkJskGFnyiqY37leOjW-uiXtsO-NePquHCaIszfgCydv7LuhTZDCijFh

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Rich Executor.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections