Overview

overview

10

Static

static

1

Havoc-Executor.rar

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Havoc-Executor.rar
  • Size 16.8MB
  • Sample240221-e93s4abf3y
  • SHA256 16ab548b51418dc856d375ca306d50fe04ba25df2fb01fdf31057f6fd72f5348
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
umbralstealer

Malware Config

Extracted

Family

  • umbral

C2

  • https://discord.com/api/webhooks/1202713966892154880/hKt1959RM0bV5-3CpJAwh821Kr6T7h9g1Q2lLB0g86ovim2izdHbNw9y6LtQFK8C5Zhm

Targets

    • Target
      Havoc-Executor.rar
    • Size 16.8MB
    • SHA256 16ab548b51418dc856d375ca306d50fe04ba25df2fb01fdf31057f6fd72f5348
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    umbralstealer

    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

      stealerumbral

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks