Overview

overview

10

Static

static

10

CrypticBoo...er.exe

windows7-x64

10

CrypticBoo...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CrypticBootstrapper.exe

  • Size

    234KB

  • MD5

    e8ad07562f0bc1b8d7f48f6d5bd40bfc

  • SHA1

    9aec9c702c4a697885edee682fc8602c73da9fa7

  • SHA256

    1d2764e360259d54a4685745c8264295be898a4d208f405702ff2f8a2200114f

  • SHA512

    1c874371239a5e90c35311cbead9474348dbaf3d548c2273c0b2a65e171cd93cc1c8e4f52c3f9c60f3af89dbf2f73743d0fc32980fff0bc0869957fa4670a870

  • SSDEEP

    6144:TloZMLrIkd8g+EtXHkv/iD4AAMXdLocDFabtIExslb8e1mwdIi:RoZ0L+EP8AAMXdLocDFabtIEx4z

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1335714213418766427/qomZLLimtf4qGu-EW_HDiFrwaxFX2jsdlA0xdwhfy9Lp3SehJYT8AAigbDxKAsRg6Oab

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • CrypticBootstrapper.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections