General

  • Target

    nova installer.exe

  • Size

    231KB

  • Sample

    230910-q9zbfshe83

  • MD5

    bef480ab09f3eb334f70e412244d96bc

  • SHA1

    56c1e8bf806570155c229e077f00d4403ee50474

  • SHA256

    6df5a020b8998f42c05475cfa66462818ced5e4f5102da54afe312f0be0325b2

  • SHA512

    d630b40c4694713a3d82928d0a0cf337778d50f828470373b33442d474ce7df4bdbfc5f5689f0185ec5935e391ff9ac390fc56a97ea4976bd2d8b1a4108afe87

  • SSDEEP

    6144:RloZM+rIkd8g+EtXHkv/iD4SL/yuMzvExlwOffuhU8aemlT8e1mei:joZtL+EP8O/yuMzvExlwOffuSjl6

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1149921374136176760/Zo94Nno2vPkbI8xnREWNtddo97Q5wc3ycRFLdccF4QqcXBWF4l_-UALvsRA-PS9cmQD5

Targets

    • Target

      nova installer.exe

    • Size

      231KB

    • MD5

      bef480ab09f3eb334f70e412244d96bc

    • SHA1

      56c1e8bf806570155c229e077f00d4403ee50474

    • SHA256

      6df5a020b8998f42c05475cfa66462818ced5e4f5102da54afe312f0be0325b2

    • SHA512

      d630b40c4694713a3d82928d0a0cf337778d50f828470373b33442d474ce7df4bdbfc5f5689f0185ec5935e391ff9ac390fc56a97ea4976bd2d8b1a4108afe87

    • SSDEEP

      6144:RloZM+rIkd8g+EtXHkv/iD4SL/yuMzvExlwOffuhU8aemlT8e1mei:joZtL+EP8O/yuMzvExlwOffuSjl6

    Score
    10/10
    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

MITRE ATT&CK Matrix

Tasks