General

  • Target

    2025-03-25_97b25ff717bbbec7863bab2e6a7cf1cb_darkgate_ngrbot_ransomlock

  • Size

    973KB

  • MD5

    97b25ff717bbbec7863bab2e6a7cf1cb

  • SHA1

    45577be5cff8877bdfecaa3e53c9d4f87800a60c

  • SHA256

    a73097a2473040ef00430e3bf37e00253d2a92e83ffa91fd8439d20e22760c6c

  • SHA512

    b1b855185741999e2fb0071d305873f5b21bf6e82e43770cea897d6376602180ecd7691584bf726fdb5b3db1b7b5f2c120566b32cd6d395e9b9b6c0ef7ac51b2

  • SSDEEP

    24576:N5r3iOAYe5xyrXKYZd8nixN/pSUCpM2W1GvgmyeRvJ:ui5xC61GyovJ

Score
10/10

Malware Config

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-03-25_97b25ff717bbbec7863bab2e6a7cf1cb_darkgate_ngrbot_ransomlock
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections