General

  • Target

    Blood EXTERNAL.exe

  • Size

    256KB

  • Sample

    231126-ntsgvsha76

  • MD5

    a4379fc86adc58efb212f662f3d6b8cc

  • SHA1

    5bf25771ff9006b0cfb6ad820503eedc054362e6

  • SHA256

    bdc7f2fa2abd884838f90a2a44af32c48f7e87d38ed4d887c80bc2f0d4e02930

  • SHA512

    3434272593c73e2ea9b3110e1e54b3ceae20634796dbbc0c1191a2983031171227b968d464de9e106c148e410ecf97ac854d45c741dad00cc76b7d1977a16df1

  • SSDEEP

    6144:oloZM+rIkd8g+EtXHkv/iD4FhHb1DA0r5SjVg8Zg+tB48e1m+ifX:2oZtL+EP8vHb1DA0r5SjVg8ZlAkf

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1178090943421894717/oiTjFNJzJlZPKQv45vEBY3HwoUJtrV26L9ZwuwlL54qr4SW6mH1ZeHMPKBtP_7sAxEen

Targets

    • Target

      Blood EXTERNAL.exe

    • Size

      256KB

    • MD5

      a4379fc86adc58efb212f662f3d6b8cc

    • SHA1

      5bf25771ff9006b0cfb6ad820503eedc054362e6

    • SHA256

      bdc7f2fa2abd884838f90a2a44af32c48f7e87d38ed4d887c80bc2f0d4e02930

    • SHA512

      3434272593c73e2ea9b3110e1e54b3ceae20634796dbbc0c1191a2983031171227b968d464de9e106c148e410ecf97ac854d45c741dad00cc76b7d1977a16df1

    • SSDEEP

      6144:oloZM+rIkd8g+EtXHkv/iD4FhHb1DA0r5SjVg8Zg+tB48e1m+ifX:2oZtL+EP8vHb1DA0r5SjVg8ZlAkf

    Score
    10/10
    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

MITRE ATT&CK Matrix

Tasks