General

  • Target

    Umbral.exe

  • Size

    230KB

  • MD5

    cd32fdd05be451dcebaa04ed226b417d

  • SHA1

    2ee53c0439df3d1d490df3ae4ae392d1b3bdde4f

  • SHA256

    f255a381ef85b1da243ce96a36362bf08fe313ff0666e58e40430bbbd365e3f3

  • SHA512

    b76af4ff2da8a31dda4b8d32b5eec349862f1b1c75d8806f4dbbbe46e7de899162cd5f79d857766fb934b8ad56f1e9b6e836cba78d1e9f0374d0fc97568e65e4

  • SSDEEP

    6144:1loZM+rIkd8g+EtXHkv/iD4IbGlW0b3cwNImHHm4ib8e1mbi:XoZtL+EP8IbGlW0b3cwNImHHm/R

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1339982673241706538/f-BJJ5qmT-ltXOQbDx4efeUtexL9l1vE-1JCDj8rq5rFwJZYvkhBHAbZC_7PtEFXQL20

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Umbral.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections