General
- Target boost v5l-cleaned.exe
- Size 602KB
- Sample260914-a1rx1ser3x
- SHA256 971756b7cd06fea4219d2d9c33c86e6d84fdc836f1fb23e766d89f38209a90aa
- MD5 368632177d6f44cedf88e18bc9e2f36c
- SHA1 8aa0c487fc75436cb1d143e5aaf446edd705fb78
- SHA512 98d38253b0391e7ae4c7d25c8400ef468964ab666b6576f2673cfa6951c40e544d32a732c5aec0d0d6a9bf12e73c40f0f820ba0d7a336986ba5746830609739a
- SSDEEP 6144:PvlUzRjQpnJp2sXd4tHkv/E6ZZtP6xnQ/R8e1msi3dQP1:Pvl8sXiyZZtl4N
- TLSH T15ED4C52239148C82D4BFB7FAB41EC46643616E8FA7EAD30847F53DAAE4D37434D46606
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
boost v5l-cleaned.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
umbral
Version
-
v1.3
C2
-
https://discord.com/api/webhooks/1546927688512438373/a41DUZGMMM9-2vRp1cGIPe0vm4CEO5lSNsqe-V32MZvySs_rQNhuhqHOmn9UB9KcKWo0
Targets
-
- Target boost v5l-cleaned.exe
- Size 602KB
- SHA256 971756b7cd06fea4219d2d9c33c86e6d84fdc836f1fb23e766d89f38209a90aa
- MD5 368632177d6f44cedf88e18bc9e2f36c
- SHA1 8aa0c487fc75436cb1d143e5aaf446edd705fb78
- SHA512 98d38253b0391e7ae4c7d25c8400ef468964ab666b6576f2673cfa6951c40e544d32a732c5aec0d0d6a9bf12e73c40f0f820ba0d7a336986ba5746830609739a
- SSDEEP 6144:PvlUzRjQpnJp2sXd4tHkv/E6ZZtP6xnQ/R8e1msi3dQP1:Pvl8sXiyZZtl4N
- TLSH T15ED4C52239148C82D4BFB7FAB41EC46643616E8FA7EAD30847F53DAAE4D37434D46606
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Umbral payload