General

  • Target

    SpotifySetup_1.zip

  • Size

    89KB

  • Sample

    231012-h1kgyafd93

  • MD5

    c843df8ccdb72ea01f1ff9aaee4c22f9

  • SHA1

    501d44fd5c722385c0fe04d73e84a613776e1801

  • SHA256

    c98fbffdea0025424251bd06290e16cff271a44cf953bf9f0edb89cf286a4785

  • SHA512

    058875d33bcedd41ac00969cf325178042f5b52ebc08fafb0d47b25c40c4e2755ccd286b510fc99f0102b75aaac825513ac5e8634eca95ed87e1c6e88ddf89f5

  • SSDEEP

    1536:O21BrBVdynjf9Rfk7iv7V/QmPwFdZuHK23Izrdzpmp8yannGghdnohgAqH0CJOi2:xHMzQiv7RJI5iK2+rVphxVBLHtkdNiq

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1152434461644947496/5BRsHMIAee930BphveYnGR7RYSeLI0V-GnrYaC4A9qoqf_PxD-ojfQQMZ93VuPEq2wQJ

Targets

    • Target

      SpotifySetup_1.exe

    • Size

      227KB

    • MD5

      cc595b072e1bd946f79acadb1736be8d

    • SHA1

      b509d0d0c124b2cc5a762c5f06750173c29615fd

    • SHA256

      77be7210033e4abf4410f204737a32cf96ab5af4c0dc062f2ba557e3e35e722d

    • SHA512

      b0b4f9787ae54ca7334224bdcfa5f24c380e855ca923595bfbd9e4d3381a523e4bac4519218cdf7ec6651361d3c1954f18f438d03b43658bb2e3f25ae82dae33

    • SSDEEP

      6144:uloZM+rIkd8g+EtXHkv/iD4b0J/zZqStIY5rWWDPGb8e1m3i:4oZtL+EP8b0J/zZqStIY5rWWDy1

    Score
    10/10
    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

MITRE ATT&CK Matrix

Tasks