Overview

overview

10

Static

static

10

SolaraBoot...10.exe

windows7-x64

10

SolaraBoot...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SolaraBootstrapper.V210.exe

  • Size

    231KB

  • MD5

    a3b5e75b75b23ccdc2d0ad1f6cdce98c

  • SHA1

    a78fa26acdfb97af1ff1ba42d5467f9c90162b4a

  • SHA256

    f0bfbd7e921feaaf6d0b701cf58fa72e665fb20cc945bdb5ebf22c4c436eb6a7

  • SHA512

    5e51aa1e84378573cda2920d17e5c0737c5c432a074324dffa2b0313794519c10b66e27c99f8d59c261b8c0b6481e3135c524c3ef6b8a8331898a0840689d9a3

  • SSDEEP

    6144:BloZM+rIkd8g+EtXHkv/iD4WAaJdLocD9abtIExcqb8e1m85i:zoZtL+EP8WAaJdLocD9abtIExHe

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1328759115253809182/fIe4XMBl8i7_EFCrAx8t8UMPorJc6I5BFEXWdDAvPtPUAtPGv0E8ejmGJxJuhJjtySTP

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SolaraBootstrapper.V210.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections