General

  • Target

    Recuro Ext v2.exe

  • Size

    229KB

  • Sample

    231125-ztyjnadb3t

  • MD5

    d7012377350fd49496b9204c27fee5c3

  • SHA1

    6e1626fa282224e2e4970c29df0960098b60f775

  • SHA256

    03f48b05a4b0d4070d0c10dc264b64a2edf0a4c767dfc499e045f84f6c9b271b

  • SHA512

    88f1b96894253e3f5f14a22a02f43654b8abdf7b084ac9a38278aa7898503c00e35db2c81a1f691d9ed629df7a29ce190bd51f3ff35b3570d7e1d8a30ad617d3

  • SSDEEP

    6144:lloZM+rIkd8g+EtXHkv/iD4cu5xClK8e1mVWi:noZtL+EP87qqI

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1171135711265693707/suyu_S1KJ-KHsLzIWQk2vHvZB-VOItFNakV9ElIiKEkHN06tueFhsHUSEifG5Xi0HJLl

Targets

    • Target

      Recuro Ext v2.exe

    • Size

      229KB

    • MD5

      d7012377350fd49496b9204c27fee5c3

    • SHA1

      6e1626fa282224e2e4970c29df0960098b60f775

    • SHA256

      03f48b05a4b0d4070d0c10dc264b64a2edf0a4c767dfc499e045f84f6c9b271b

    • SHA512

      88f1b96894253e3f5f14a22a02f43654b8abdf7b084ac9a38278aa7898503c00e35db2c81a1f691d9ed629df7a29ce190bd51f3ff35b3570d7e1d8a30ad617d3

    • SSDEEP

      6144:lloZM+rIkd8g+EtXHkv/iD4cu5xClK8e1mVWi:noZtL+EP87qqI

    Score
    10/10
    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

MITRE ATT&CK Enterprise v15

Tasks