Overview

overview

10

Static

static

10

3S.exe

windows7-x64

10

3S.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3S.exe

  • Size

    227KB

  • Sample

    230821-twypjsec58

  • MD5

    0c6f57e34c60e926869925974c0ba0c6

  • SHA1

    c2c96e1a4da5fe008796801569ebdfcde4d3c07b

  • SHA256

    3818bc71c250768baec123373d2e873428509f7dcef12a56f4d428d488661c71

  • SHA512

    70281ccd28331260e0808d00a0965753e4f8d9c4b8a0e211abd97556429ad7cb3a647a017f53a8d111468639fe9c05e0022cb034f6069b6b9fff214d389ac193

  • SSDEEP

    6144:+loZM+rIkd8g+EtXHkv/iD4n6rk/1+mplsl3ySX6Eb8e1mai:ooZtL+EP8n6rk/1+mplsl3ySX30

Score
10/10
umbralstealer

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1143115606330200074/pyKgc8H0hMiolN7TnRv_a5UZxMEV9hMyMPcyMEE79xLCjkKRbFA2ce8qYJuxmfb_M-83

Targets

    • Target

      3S.exe

    • Size

      227KB

    • MD5

      0c6f57e34c60e926869925974c0ba0c6

    • SHA1

      c2c96e1a4da5fe008796801569ebdfcde4d3c07b

    • SHA256

      3818bc71c250768baec123373d2e873428509f7dcef12a56f4d428d488661c71

    • SHA512

      70281ccd28331260e0808d00a0965753e4f8d9c4b8a0e211abd97556429ad7cb3a647a017f53a8d111468639fe9c05e0022cb034f6069b6b9fff214d389ac193

    • SSDEEP

      6144:+loZM+rIkd8g+EtXHkv/iD4n6rk/1+mplsl3ySX6Eb8e1mai:ooZtL+EP8n6rk/1+mplsl3ySX30

    Score
    10/10
    umbralstealer

    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

      stealerumbral
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks