Overview

overview

10

Static

static

10

ImperialSt...ee.exe

windows7-x64

10

ImperialSt...ee.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ImperialStealerexeexeexee.exe

  • Size

    287KB

  • MD5

    f0a434e6a2826a3bb563c59dfe720a94

  • SHA1

    46899f6dda27a9ddc7f0849f999a7d7851f6960c

  • SHA256

    0082170e2185d53ec008632a7e8d10b6ff831c063dd2fbf23b6a888f21e6da29

  • SHA512

    14fd13968cbc005764e43bfc62056c953a3c61c94f90888b9a3c26d3c0b1b8645335e7c950ad05787bd75423c5a2d310baf08dc41ed6aef99f773cab76f694e4

  • SSDEEP

    6144:+loZM+rIkd8g+EtXHkv/iD4U8OK/w2xpaqPyAxVk1Eb8e1mwi:ooZtL+EP8U8OK/w2xpaqPyAxVkOG

Score
10/10
umbral

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1125959139969994822/tjr2Z1YnGve0qXnwycv9Zn-50F_cWvKxydzIRLCfjpEqRL1feAQxWnrH1tg6T4YplSIy

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral family
    umbral
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ImperialStealerexeexeexee.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections