Overview

overview

10

Static

static

10

proxy.exe

windows7-x64

10

proxy.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    proxy.exe

  • Size

    246KB

  • Sample

    240123-p4gzjsbbe9

  • MD5

    4ef1cda1badeab461aa59991f9499754

  • SHA1

    418fb087216cc11b6981a386fe4de673b089c3d8

  • SHA256

    4656d69359cd36909ffafde605da9acaa44f231465c2cf04083f312997a79143

  • SHA512

    2b4e6bcf02e18c8db8a703a109581928cdb741409e3b122a2fbdd387bac0aa8bcbcdc3e9b4673fe8309f1c885eed51b1feae505b18ccacfe9879712cf81aaf72

  • SSDEEP

    6144:ploZM+rIkd8g+EtXHkv/iD4EXNmxfEY3vmfh8It2qI8e1mZi:boZtL+EP8EXNmxfEY3vmfh8ItcH

Score
10/10
umbralstealer

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1157726362107400293/c6ZEwEOFH8dHCfi4HquKbcfsRWMiQKK9L9XovoVHUUKxMY51EPd2dS1MpKFqF1hr-Bkq

Targets

    • Target

      proxy.exe

    • Size

      246KB

    • MD5

      4ef1cda1badeab461aa59991f9499754

    • SHA1

      418fb087216cc11b6981a386fe4de673b089c3d8

    • SHA256

      4656d69359cd36909ffafde605da9acaa44f231465c2cf04083f312997a79143

    • SHA512

      2b4e6bcf02e18c8db8a703a109581928cdb741409e3b122a2fbdd387bac0aa8bcbcdc3e9b4673fe8309f1c885eed51b1feae505b18ccacfe9879712cf81aaf72

    • SSDEEP

      6144:ploZM+rIkd8g+EtXHkv/iD4EXNmxfEY3vmfh8It2qI8e1mZi:boZtL+EP8EXNmxfEY3vmfh8ItcH

    Score
    10/10
    umbralstealer

    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

      stealerumbral
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks