Overview

overview

10

Static

static

10

NeverSense.exe

windows7-x64

10

NeverSense.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NeverSense.exe

  • Size

    231KB

  • MD5

    7414d4b850e9a986b199a741613a5fd0

  • SHA1

    797ac658f7371c68e64e94b1ac5df8d80b120710

  • SHA256

    a68b90e0481fc97117d68b197e3149e98f9040ea0b1b70f83a1f0de9825124d0

  • SHA512

    ecec7ad30472c366a9bdada5de639471efd207a297c7652f17343bbd83f94b0486ade175b40272a31c052b7559c32ce4bd9fe8be0ad63fccbfb753db41ca6c00

  • SSDEEP

    6144:RloZM+rIkd8g+EtXHkv/iD4YfF8Ye5xy9XKYZd8N3b8e1mu/i:joZtL+EP8YfF8Ye5xy9XKYZd8Bg

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1330470964814811187/nOopmsgXPxOZUs11NCxKWmZd3atKXJgfSorOw-E1yoR8uPiRIsApWmEwXiHKMjYy8pJX

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NeverSense.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections