General
-
Target
Umbral.exe
-
Size
229KB
-
MD5
4bc2e7ac1436d46b28811c13b73b7700
-
SHA1
113e650f1c5d41a20bdcf33152d2b90ba23b04e9
-
SHA256
3a61a0cf3cc36d28922d8215d7ec5414685e195e694bac030bca29a32d9683a0
-
SHA512
114eb0f25fd0d1f9378645007f327dd7d9aa99065e3982b473a89bd08fb529c3d6d0092c79dc1f6fa12ed99e2f12a7820b6e3c9254f5d838df29131bb7b2001f
-
SSDEEP
6144:tloZM+rIkd8g+EtXHkv/iD4/E0fAmB5Kz/Cwhl0Adb8e1mc3li:voZtL+EP8/E0fAmB5Kz/Cwhl007c
Score
10/10
Malware Config
Extracted
Family
umbral
C2
https://discord.com/api/webhooks/1330520674737065984/wAiQioltW-4FvXy-ncOMtKyLEmMWGAXhzHpA-G43Qe5DD_tIZIJcgFMKC_EwekK39ywr
Signatures
-
Detect Umbral payload 1 IoCs
-
Umbral family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Umbral.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections