Overview

overview

10

Static

static

10

Umbral.exe

windows7-x64

10

Umbral.exe

windows10-1703-x64

10

Umbral.exe

windows10-2004-x64

10

Umbral.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Umbral.exe

  • Size

    231KB

  • Sample

    240205-l16lysfdam

  • MD5

    2bd5664afed4d5821041e61b19f55a30

  • SHA1

    8d0f1ea431c0e00b39898a05f4ae37ac55800703

  • SHA256

    5e0dce9978369a90f9380c4630f79b2801dd0251f699bee7d7b85f43c51f027e

  • SHA512

    991066a886a2fd36246d1fe88a7c62cb6672a7c8821c94a4b1c8df650968a39aa0f1519451d569b9b478a30cd3465fda32da69816b5ce86bd95ccd9a7d781fe7

  • SSDEEP

    6144:RloZM+rIkd8g+EtXHkv/iD4+B/RkqNlOcLWU1pAN8b8e1mKi:joZtL+EP8+B/RkqNlOcLWU1pAa4

Score
10/10
umbralstealer

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1204001041151164457/58E_8BYTbBaL7TinEq1fpWbHhcPMLkT4TgEE7gNN2nbqFlJil4PT-CZHLYhATtVyr6XM

Targets

    • Target

      Umbral.exe

    • Size

      231KB

    • MD5

      2bd5664afed4d5821041e61b19f55a30

    • SHA1

      8d0f1ea431c0e00b39898a05f4ae37ac55800703

    • SHA256

      5e0dce9978369a90f9380c4630f79b2801dd0251f699bee7d7b85f43c51f027e

    • SHA512

      991066a886a2fd36246d1fe88a7c62cb6672a7c8821c94a4b1c8df650968a39aa0f1519451d569b9b478a30cd3465fda32da69816b5ce86bd95ccd9a7d781fe7

    • SSDEEP

      6144:RloZM+rIkd8g+EtXHkv/iD4+B/RkqNlOcLWU1pAN8b8e1mKi:joZtL+EP8+B/RkqNlOcLWU1pAa4

    Score
    10/10
    umbralstealer

    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

      stealerumbral
    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks