General

  • Target

    rc7.exe

  • Size

    240KB

  • Sample

    230711-a3gj3afb2z

  • MD5

    0db546c07a75eaa50baff55111041731

  • SHA1

    afea857574fca99f0073bc30edcb991324ba16c7

  • SHA256

    ff56db9447153d81e78e46beb2ee25aca7ff02bab23be39bb24c8ee4d93021e3

  • SHA512

    3d901cc503eba613fd124bb19a4962644493b8d327cd37c064fbaea526b9ec0c55000e945cceb602d17eb9f6b4474046cb871a9d2384f2b319adbfb71928f999

  • SSDEEP

    6144:DloZM+rIkd8g+EtXHkv/iD4lpy4AmB5KP/Cwhl0Wzb8e1m1ZiX:hoZtL+EP8lpy4AmB5KP/Cwhl0caA

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1116068562331783239/pYoaRGQQxDu5yiFXO2V5FPx73m7R_kaS0Cek299-LGzPb6VbPbNaNC_E2cz8c8d982zw

Targets

    • Target

      rc7.exe

    • Size

      240KB

    • MD5

      0db546c07a75eaa50baff55111041731

    • SHA1

      afea857574fca99f0073bc30edcb991324ba16c7

    • SHA256

      ff56db9447153d81e78e46beb2ee25aca7ff02bab23be39bb24c8ee4d93021e3

    • SHA512

      3d901cc503eba613fd124bb19a4962644493b8d327cd37c064fbaea526b9ec0c55000e945cceb602d17eb9f6b4474046cb871a9d2384f2b319adbfb71928f999

    • SSDEEP

      6144:DloZM+rIkd8g+EtXHkv/iD4lpy4AmB5KP/Cwhl0Wzb8e1m1ZiX:hoZtL+EP8lpy4AmB5KP/Cwhl0caA

    Score
    10/10
    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

MITRE ATT&CK Matrix

Tasks