Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Umbral.exe

  • Size

    229KB

  • MD5

    6743f7ff6fc7ca5a26be995ad9f2a2ec

  • SHA1

    9afd04785b6d64fecaf716be09a6521ff9fc723b

  • SHA256

    354e9e533a21c053448fcd4baf837f9c36ffbd6467cfdca6519ec70b2974653d

  • SHA512

    f99f2bc59c8e4a3121be2c2223597800e0b79be4ff27101492f75beb8f4a8cd57875e275ac30865bb145842c7cde306071f04cb39e82db4c978f725694db9bb5

  • SSDEEP

    6144:9loZMzrIkd8g+EtXHkv/iD4tV6ClS8e1mZMqi:foZcL+EP8TiN

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1335627271188381807/tO4k8UXuFM44y4xA4ltRGnEe494HtRm9xsxKDfxBEI3WWnPMHArGjT8Vpow7vrR5I_N-

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections