Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Umbral1.exe

  • Size

    221KB

  • MD5

    fe655b03add462121d67240f461e8787

  • SHA1

    73907706fdf7922ba19a27f4b1fd315f7c107efe

  • SHA256

    dccdba44701fbf3031e6a2ad016cb702c7941ca2abbc754ba60b1d0ca5396e82

  • SHA512

    c00653793e37dee5b4bdc5cbd0194038928e03dfb8a3e8910c54d8c20133e163c59c36fb6989c180c3fb9e39e9a37d3544292f55fd92367749e7fa143c4c8b7b

  • SSDEEP

    6144:KloZMUrIkd8g+EtXHkv/iD439sJNlK8euYi:0oZrL+EP8Na

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1338864679413612690/az7gaYeiU1_nRKVRHkmFzjNO2o2mDOiEqjxYZZ60NRhP6I8SyvMa2cmFPyYkFBXYOt8R

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections