Extracted

• • Target

    DX9WARE.zip

  • Size

    136KB

  • MD5

    cc99a7351297712241c1206fcfadc0f3

  • SHA1

    87dc5692429931626cc796d1ad8d4cb49e2f35db

  • SHA256

    4754cedbaa0c6c31d34744bbe26f231ff6fd92fd6ed0c832d489689709d1cacc

  • SHA512

    bb19ec736aa0bb996c943afb9228a496f16e772a1b19a1b4f79bbbffc55ac555af975df506d5ac1d301f5485f81dd6edc1cfc90e3bf5bafe235f296e90dae874

  • SSDEEP

    3072:owOe09+qfy3YEaXKMwpytpgcStLKXiMirtsTJ7NtfAEQhp4O7Bkei:a9+q6FM+KljhPTBvfAEWPBc

  Score

  10^/10

  umbralstealer

  • Detect Umbral payload

  • Umbral

    Umbral stealer is an opensource moduler stealer written in C#.

    stealerumbral

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1

• • Target

    DX9WARE/Read First Before Open.txt

  • Size

    210B

  • MD5

    da760f75700563f49985feb5ccd022ec

  • SHA1

    7f4fab30dadf0aab8ab78d532b6eaab85122109d

  • SHA256

    aa6981270cb33892a399fb5cbf4d0e515595e01ff82658413adeadaa31007344

  • SHA512

    12bc28f5444a124d037c45fc0d3746598195b5f4c92ad6b43d7190445228ecc9503df3b9e5d851655ce7f9a489e6c4c04277ebb761513cf1dfbf23d343d325da

  Score

  1^/10
  behavioral2

• • Target

    DX9WARE/dx9injector.exe

  • Size

    632KB

  • MD5

    acb1199c60d8458af181d560c3548f32

  • SHA1

    343f54c729df7a767e3cfda60eb2ac30383a8b88

  • SHA256

    35d545e19d430102709e03a9c9e27a90892e0e65717ac7731db51929cd631593

  • SHA512

    c78c223bace7591c6b13ec3414f20db4bfc256df535b127eaafeb3aceed999b569a318380689fc8ca64f9877e790ea775f99f2051235c73a991683767993d685

  • SSDEEP

    6144:3loZM+rIkd8g+EtXHkv/iD4kZ+a6YXzQTp8aLLyiQb8e1m0iHanvOG2NYg7Cn+A7:VoZtL+EP8kZ+a6YXzQTp8aLLybOTDA7

  Score

  10^/10

  umbralstealer

  • Detect Umbral payload

  • Umbral

    Umbral stealer is an opensource moduler stealer written in C#.

    stealerumbral
  behavioral3