Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Celestial.exe

windows7-x64

10

Celestial.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Celestial.exe

  • Size

    251KB

  • Sample

    231010-2arccafc7t

  • MD5

    bd135af56e98782a34081767be973f13

  • SHA1

    8e60cf769dba53a1465e55831062729bedfbb146

  • SHA256

    ed702d0b8e9551446f6ffa0363286712615e10bfdfe66d039bfc9db861f6ab19

  • SHA512

    2c4611886912e354d823fb740dd0372ac6c2ca80235e5d37b5a37efda75c2deceba8a395e3a402dcc614014bf68518e14683cac57baa8abb330fe71e9e36ea2f

  • SSDEEP

    6144:IloZMLrIkd8g+EtXHkv/iD4vxBomkrHMe9YW3X2B+b8e1mhbUiIQFceQx:WoZ0L+EP8vxBomkrHMe9YW3X2gWbd0e+

Score
10/10
umbralstealer

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1156697468130566204/OcFf7sKoPqxghTUxcBK46PBL-GzDZUJRuqDmNaCntSaSl1CHU1wYua0VjQTrbVlv7dNS

Targets

    • Target

      Celestial.exe

    • Size

      251KB

    • MD5

      bd135af56e98782a34081767be973f13

    • SHA1

      8e60cf769dba53a1465e55831062729bedfbb146

    • SHA256

      ed702d0b8e9551446f6ffa0363286712615e10bfdfe66d039bfc9db861f6ab19

    • SHA512

      2c4611886912e354d823fb740dd0372ac6c2ca80235e5d37b5a37efda75c2deceba8a395e3a402dcc614014bf68518e14683cac57baa8abb330fe71e9e36ea2f

    • SSDEEP

      6144:IloZMLrIkd8g+EtXHkv/iD4vxBomkrHMe9YW3X2B+b8e1mhbUiIQFceQx:WoZ0L+EP8vxBomkrHMe9YW3X2gWbd0e+

    Score
    10/10
    umbralstealer

    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

      stealerumbral
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks