General

  • Target

    Umbral.exe

  • Size

    231KB

  • Sample

    240212-clkaqsfd8w

  • MD5

    a270d4041c245aec5deeed971fba0e6e

  • SHA1

    b9cacd5e11108f37def65b4f17281fa658dde5ef

  • SHA256

    34ab1f6b7597b68d9799a803d61a8b07ab4221a887cc038c7dff132d857c26f1

  • SHA512

    8c6361c0aca08058bbc3862801247c4516f99bb0935e05ad314e4ee0f9d5eefb41017ba28e5743188b9c68c6495f6a7e3142152aa40737d6955f80b81f626453

  • SSDEEP

    6144:RloZM+rIkd8g+EtXHkv/iD4CiRrQBPUon9WvRsY9jfy8e1mFmi:joZtL+EP8DRrQBPUon9WvRsY9MeL

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1204944287041847307/aoa_S28cr8V4g11xswAZC9SdvRJS8ygczDK-GfItmMFXCcL2edroJI5lraSE-OISlf6d

Targets

    • Target

      Umbral.exe

    • Size

      231KB

    • MD5

      a270d4041c245aec5deeed971fba0e6e

    • SHA1

      b9cacd5e11108f37def65b4f17281fa658dde5ef

    • SHA256

      34ab1f6b7597b68d9799a803d61a8b07ab4221a887cc038c7dff132d857c26f1

    • SHA512

      8c6361c0aca08058bbc3862801247c4516f99bb0935e05ad314e4ee0f9d5eefb41017ba28e5743188b9c68c6495f6a7e3142152aa40737d6955f80b81f626453

    • SSDEEP

      6144:RloZM+rIkd8g+EtXHkv/iD4CiRrQBPUon9WvRsY9jfy8e1mFmi:joZtL+EP8DRrQBPUon9WvRsY9MeL

    Score
    10/10
    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

MITRE ATT&CK Matrix

Tasks