General

  • Target

    Umbral.exe

  • Size

    229KB

  • Sample

    240220-vd8bpscc88

  • MD5

    95b54ca0a6742f2b35c4b16215a691e0

  • SHA1

    81840a84816bb1fed04289470b2f7f144c830589

  • SHA256

    a526a0732206548456573538c31e6f5b050c7ed8ebdf3e63e6acfaa77a766182

  • SHA512

    2b4758ae67a972b7801db9d6fd1ee26ff3a3c399f03019541c06a71d49e7582b9901aa83f9d0f831c4dd6c27d18e0d1032f255f746d8c85fc011d9c59b3df526

  • SSDEEP

    6144:6loZM+9EB1/SqctonEPfCqAdKq9gji8e1mu6:EoZQdSqcwvUq2kO

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1209542310099157102/rO88KSrY6i_l0V_XKqkrJ2fNW4I6M1A2EIwnw-FUW9CplqknvRpSHANTBN-Cq_ZJLfCq

Targets

    • Target

      Umbral.exe

    • Size

      229KB

    • MD5

      95b54ca0a6742f2b35c4b16215a691e0

    • SHA1

      81840a84816bb1fed04289470b2f7f144c830589

    • SHA256

      a526a0732206548456573538c31e6f5b050c7ed8ebdf3e63e6acfaa77a766182

    • SHA512

      2b4758ae67a972b7801db9d6fd1ee26ff3a3c399f03019541c06a71d49e7582b9901aa83f9d0f831c4dd6c27d18e0d1032f255f746d8c85fc011d9c59b3df526

    • SSDEEP

      6144:6loZM+9EB1/SqctonEPfCqAdKq9gji8e1mu6:EoZQdSqcwvUq2kO

    Score
    10/10
    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

MITRE ATT&CK Enterprise v15

Tasks