General
- Target Mando x cheat (3).rar
- Size 78KB
- Sample260826-x2v3dsvekd
- SHA256 8d46fefc57af155228cc984c0371b8ef4d36462bbc2d4cc9f4d3b00988049b30
- MD5 e16de5ce3ed92c3ce6ea5fc3d599c86f
- SHA1 ef3fd1db8e70d3d2f98eb885ceb3818d4065b3d3
- SHA512 683e297001085b31518dd6da19395cf22f193b599aa682303b94c7c7090694ad7431d241bcfc7fb84a8d812a5e8266838697d1fd5ceea48a1ff358c9f5cd5d6b
- SSDEEP 1536:mdXhpHGqKGGbRl6EgaAcd0WjHouUTRW+n/Sri0TQ1/++tbnb7m:chUqKGGbRAxaVdvvUNW7ifty
- TLSH T1BE73120120905A8CF764282E49CF9D3ABD8EDCF85474D320D20EA32C926B16BD2F556F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Malware Config
Extracted
Family
-
umbral
Version
-
v1.3
C2
-
https://discord.com/api/webhooks/1537161722937213129/ShTaq4MH_sB9ZUUb00hzO_20oq8qACTxpajM60QyupxFm_KqxHH7BVhF220Wv74PYSeb
Targets
-
- Target Mando x cheat (3).rar
- Size 78KB
- SHA256 8d46fefc57af155228cc984c0371b8ef4d36462bbc2d4cc9f4d3b00988049b30
- MD5 e16de5ce3ed92c3ce6ea5fc3d599c86f
- SHA1 ef3fd1db8e70d3d2f98eb885ceb3818d4065b3d3
- SHA512 683e297001085b31518dd6da19395cf22f193b599aa682303b94c7c7090694ad7431d241bcfc7fb84a8d812a5e8266838697d1fd5ceea48a1ff358c9f5cd5d6b
- SSDEEP 1536:mdXhpHGqKGGbRl6EgaAcd0WjHouUTRW+n/Sri0TQ1/++tbnb7m:chUqKGGbRAxaVdvvUNW7ifty
- TLSH T1BE73120120905A8CF764282E49CF9D3ABD8EDCF85474D320D20EA32C926B16BD2F556F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Umbral payload
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.