Overview

overview

10

Static

static

10

Umbral.exe

windows7-x64

10

Umbral.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Umbral.zip

  • Size

    88KB

  • Sample

    230621-26t34sbg98

  • MD5

    9db04c7541a60c7e0c8888199f0172f7

  • SHA1

    10d5fad0a7072fc523ae1e5c06ca9168af557495

  • SHA256

    54f3524bd85f2a9d6633f8442039e2cf49d206c29ef660e650c7137d2d9b451d

  • SHA512

    64cc574a904c98d274c1de823fd45d677d0e7b211615c905c8a86e85ceb98a293819ad3af6536f84cb9964a21759dd66fdc5c94dae8e2c3475989501bea90087

  • SSDEEP

    1536:LSPx+7toK0lqafjxnXH5vDJtI0joR1S3qLeFuCNqwGN1v1rKr5GFeBetbOLC+Xv0:LSCoKt2l35vDJtI71+DZREN+dGFeBmOo

Score
10/10
umbralstealer

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1118307538878861323/J0SDDb7E4iJhAhWja-iuNQiTDJIbNf3i2RZ4oL_SdjbJT8703fY7aAgUtUtZ25FeJTyg

Targets

    • Target

      Umbral.exe

    • Size

      227KB

    • MD5

      8b456d26ac4c2edc6fd1f47796a65151

    • SHA1

      92054d829e679a748559264864b7f4d4d1bb96e2

    • SHA256

      e7f32c2d9d9aa4a4b9938f4c782fe31aa75e1e1c479e8ada580170193d250eac

    • SHA512

      3f807578f882afecf40ca992d3b237a04df136f95a52948c55efa0e0a13c8b38a68f21b68ed261062d8a42ed78bd29e942c065e522fe16415f0acdbdab174329

    • SSDEEP

      6144:+loZM+rIkd8g+EtXHkv/iD4Nqjn5nsAvHOXZkQldhb8e1mgi:ooZtL+EP8Nqjn5nsAvHOXZkQlTC

    Score
    10/10
    umbralstealer

    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

      stealerumbral
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks