Overview

overview

10

Static

static

10

CorruptX1.3.exe

windows7-x64

10

CorruptX1.3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CorruptX1.3.exe

  • Size

    495KB

  • MD5

    c57206c732c6cfaa8a4de6495732c8de

  • SHA1

    eb4127b4a20b05a3db766b3c953f0e12eb3070e9

  • SHA256

    0465cfcd8ec390d5d4e321ca1609ee70be881b906754cb5e783201114d922fcf

  • SHA512

    f1205d7c5daaa6b38ec121200875c8355857252ad4d474ce629c8584e73933e050e4f74c968617908044b9e819bc099dab8866e4f065acd4aa0b203001d1a6c9

  • SSDEEP

    6144:vloZM+rIkd8g+EtXHkv/iD4cGiqU69VeGbGkFZw9Xb8e1mqe6i:NoZtL+EP8cGiqU69VeGbGkFZwBLS

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1330967717079027774/wuYhxj7H9hhyXmX2qS4ee6Vv2q083EOpuDjdT-c5pmHqDdHcGXzr2KPkcCg3Qzew2QWy

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • CorruptX1.3.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections