General

  • Target

    Umbral.exe

  • Size

    229KB

  • MD5

    40aeff8340acaf040ca3c3bc883b8673

  • SHA1

    6bee9df7f7d60f9a1b811cb7f10bac5d2c3b2c24

  • SHA256

    901ecaae92ecf398de0be871e6d1aa0de8598b46e9111b8f9db73320f3b0c051

  • SHA512

    83df0f03272dda85969f6928afd5c91da7a4b8d34f1a6ed7b7a88369480d1f0fb2549a7cbe8c80598cb3e300b2d703e6fa4cf598fee7aad15879d0a0213c964c

  • SSDEEP

    6144:lloZM9rIkd8g+EtXHkv/iD4KHutxdt8e1mBuJi:noZOL+EP8CSxfc9

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1329100110281310242/4ob-EMUr-8_GRvh4pjoi6niWrlhQkQuHXlLvtsQIrwhxBMgMWyZGJ_lYeVdq9H2tkOgS

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections