General

  • Target

    Star.exe

  • Size

    235KB

  • Sample

    240220-vtpvascb2t

  • MD5

    89d9c3ae4167a3b9a77a6a3ab0c2059c

  • SHA1

    eed768337a0b4534e667099f4b24476f69d16795

  • SHA256

    cd4ba31d82b9a83f45d5c2a12b91dfce88b70acff2ed894bb1abc617a98fa8bf

  • SHA512

    ca888898ba94230d24caa6c34da28aff00b62af4be33537ed1e228a668cca921e6211cdcc163064df1bee62974f1b028550cd70c99896bee5e4797681db44f2d

  • SSDEEP

    6144:3loZM+9EB1/SqctonEPfCqAiBaJTlOyNLcxDiijSjj8e1mEXC:VoZQdSqcwviBaJTlOyNLcxDiijS/M

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1209321304994619533/mMcDpunpyAbML-H8z32uQlMHknkdb5LP13ysEZnYmct14-eXHUHss93NnbJFOWSbWxWO

Targets

    • Target

      Star.exe

    • Size

      235KB

    • MD5

      89d9c3ae4167a3b9a77a6a3ab0c2059c

    • SHA1

      eed768337a0b4534e667099f4b24476f69d16795

    • SHA256

      cd4ba31d82b9a83f45d5c2a12b91dfce88b70acff2ed894bb1abc617a98fa8bf

    • SHA512

      ca888898ba94230d24caa6c34da28aff00b62af4be33537ed1e228a668cca921e6211cdcc163064df1bee62974f1b028550cd70c99896bee5e4797681db44f2d

    • SSDEEP

      6144:3loZM+9EB1/SqctonEPfCqAiBaJTlOyNLcxDiijSjj8e1mEXC:VoZQdSqcwviBaJTlOyNLcxDiijS/M

    Score
    10/10
    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

MITRE ATT&CK Enterprise v15

Tasks