General

  • Target

    Star.exe

  • Size

    266KB

  • Sample

    240220-c7qpmshf61

  • MD5

    4f2d0374f93b4079599cd3be7293c68c

  • SHA1

    28e6d128300a2a25203d39f492503b0391932f51

  • SHA256

    7e5a131d6b76fd964d4947b9c060fa0ff827162cb5047a9aa7edbe4dc5a91f66

  • SHA512

    7d3b853d1bbfdcbbfb7d5aff8e595590a0f1866459b80ca7822c5fbab1e5043c99e70b87f71cef4033dc4e1fcdc864b0fe0c3e3b84ad595a445092cff35fbfcb

  • SSDEEP

    3072:k2Jog9kK82e+i392qYpQZCi+oynzDQjj5JWCnWdZN7/VmtgzExXB+btwBtIxY8eM:jJo29yXZYmCnzDQjjLWNRmTd98e1Zl

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1209321304994619533/mMcDpunpyAbML-H8z32uQlMHknkdb5LP13ysEZnYmct14-eXHUHss93NnbJFOWSbWxWO

Targets

    • Target

      Star.exe

    • Size

      266KB

    • MD5

      4f2d0374f93b4079599cd3be7293c68c

    • SHA1

      28e6d128300a2a25203d39f492503b0391932f51

    • SHA256

      7e5a131d6b76fd964d4947b9c060fa0ff827162cb5047a9aa7edbe4dc5a91f66

    • SHA512

      7d3b853d1bbfdcbbfb7d5aff8e595590a0f1866459b80ca7822c5fbab1e5043c99e70b87f71cef4033dc4e1fcdc864b0fe0c3e3b84ad595a445092cff35fbfcb

    • SSDEEP

      3072:k2Jog9kK82e+i392qYpQZCi+oynzDQjj5JWCnWdZN7/VmtgzExXB+btwBtIxY8eM:jJo29yXZYmCnzDQjjLWNRmTd98e1Zl

    Score
    10/10
    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

MITRE ATT&CK Enterprise v15

Tasks