Overview

overview

10

Static

static

3

aimsense.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aimsense.exe

  • Size

    148KB

  • Sample

    240221-3b38zaha49

  • MD5

    db11d5b13124f9dab72425ce56662a4f

  • SHA1

    09b901184f4865437769f0999bd6d9589008c25d

  • SHA256

    df43da5e9f003414fb7087d002291d62e509d1f977e1304d647abf8ec241a68f

  • SHA512

    71597bd4ae24b1b74904f7a09c0fdac8d082a86e1d0d794f419057bdccf7f3c5dc07f60cc3499aa00cf2b96e181b7f35b33dbf5fa55a755d7e6fc4c766a708f4

  • SSDEEP

    3072:3w10kz9kMiNZKVHd64TGyTOdp6KZt+2T4m6DkBcsfdmC:32T9kMiNZ6HgdyTODZ4p0cWd

Score
10/10
umbralstealer

Malware Config

Targets

    • Target

      aimsense.exe

    • Size

      148KB

    • MD5

      db11d5b13124f9dab72425ce56662a4f

    • SHA1

      09b901184f4865437769f0999bd6d9589008c25d

    • SHA256

      df43da5e9f003414fb7087d002291d62e509d1f977e1304d647abf8ec241a68f

    • SHA512

      71597bd4ae24b1b74904f7a09c0fdac8d082a86e1d0d794f419057bdccf7f3c5dc07f60cc3499aa00cf2b96e181b7f35b33dbf5fa55a755d7e6fc4c766a708f4

    • SSDEEP

      3072:3w10kz9kMiNZKVHd64TGyTOdp6KZt+2T4m6DkBcsfdmC:32T9kMiNZ6HgdyTODZ4p0cWd

    Score
    10/10
    umbralstealer

    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

      stealerumbral

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks