General

  • Target

    vvvv.exe

  • Size

    227KB

  • Sample

    240205-nwcjesehd7

  • MD5

    064412f7742a570af4817b07ffc1da36

  • SHA1

    5b2018f24d6d7dc4304598e332a4bd4d8683885b

  • SHA256

    9e3e2baed467adc5d52d7e9fa9158937c4006aa8a2f9093f0562e569ba5a1782

  • SHA512

    22c32df71079a1549e481068a0890442babfbb07d67519e9b880792a43522a82f44eb29ef0bcf99ef337af81cc0b0d1caa072e56b2201bc1911f5c6ba14453b4

  • SSDEEP

    6144:eloZM+rIkd8g+EtXHkv/iD4eqoSHdmOhUU9va6vyDb8e1mDZi:IoZtL+EP8eqoSHdmOhUU9va6vQmA

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1204001041151164457/58E_8BYTbBaL7TinEq1fpWbHhcPMLkT4TgEE7gNN2nbqFlJil4PT-CZHLYhATtVyr6XM

Targets

    • Target

      vvvv.exe

    • Size

      227KB

    • MD5

      064412f7742a570af4817b07ffc1da36

    • SHA1

      5b2018f24d6d7dc4304598e332a4bd4d8683885b

    • SHA256

      9e3e2baed467adc5d52d7e9fa9158937c4006aa8a2f9093f0562e569ba5a1782

    • SHA512

      22c32df71079a1549e481068a0890442babfbb07d67519e9b880792a43522a82f44eb29ef0bcf99ef337af81cc0b0d1caa072e56b2201bc1911f5c6ba14453b4

    • SSDEEP

      6144:eloZM+rIkd8g+EtXHkv/iD4eqoSHdmOhUU9va6vyDb8e1mDZi:IoZtL+EP8eqoSHdmOhUU9va6vQmA

    Score
    10/10
    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

MITRE ATT&CK Matrix

Tasks