Overview

overview

10

Static

static

10

Новая...2).zip

windows10-2004-x64

1

Новая...2).zip

windows10-ltsc_2021-x64

1

Новая...2).zip

windows11-21h2-x64

1

Umbral.exe

windows10-2004-x64

10

Umbral.exe

windows10-ltsc_2021-x64

10

Umbral.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Новая сжатая ZIP-папка (2).zip

  • Size

    91KB

  • MD5

    bc012fa26d5fcd67a2b2056adfac97e4

  • SHA1

    f46d850bf4c94e5732ab2141617d6622aa85de3e

  • SHA256

    61a29cd27dd6aeac57e0ca467a3f87a04e4a7a122434d5db495cf34c7097f9e8

  • SHA512

    eb14c54a7daded6ce91508348b809be1e2834bbcf5fba3c8170f8584fa9d2b298f2f9861d4e28e965247269e75df0b9cd892a3e29c6a9353979717992ca283d0

  • SSDEEP

    1536:m3iw5aFnf96r+wif9Rfk7iv7VsDT2qYS0eA0IO9Bd9zQmyq7o2kgx1Zp9kIODiXm:m3i8aN9xwKQiv7KWj7FzO19cvqEgXBNI

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1354174093003329598/RcMwCs1pKWptqNfuG-bnbpQYHfvzrhYHkp-JQyQL19RLBiyUZN0PzH5agHDx098fepIw

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Новая сжатая ZIP-папка (2).zip
    .zip
  • Umbral.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections