Resubmissions

01-03-2024 19:56

240301-ynxjqscd9s 10

01-03-2024 19:36

240301-ya9bdace23 10

General

  • Target

    Grape Cheat Crack.exe

  • Size

    494KB

  • Sample

    240301-ynxjqscd9s

  • MD5

    7bafac8b38d3dd8452af266a2f4a4cce

  • SHA1

    a71b7d1ae925605a05c4e9fd50a49e601626c84c

  • SHA256

    e70684c0929b0713733778032e5b310bae9967f544febfe62009c820f71e950d

  • SHA512

    08f2f1f334757858333b72488fffeb283809d202bf09b40fb5a6a32f4abb57b42484793e8c79a4e53c50cac576cbbea2fadc8f06edeeca84774c6cb90527904a

  • SSDEEP

    12288:9oZOL+EP8sqcTR/k4XLG/BcoNPpUL8jNDxChcOtC+R:+I83cTR/k4XLG/BcoNPeLYND+

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1209531944627474432/zDzX-6KCu26BEdQSNJNMAR4vRuSMbdRUyZ2F1CzlpYzcC7wCS3VbMg6-aUfVUzM6-jRp

Targets

    • Target

      Grape Cheat Crack.exe

    • Size

      494KB

    • MD5

      7bafac8b38d3dd8452af266a2f4a4cce

    • SHA1

      a71b7d1ae925605a05c4e9fd50a49e601626c84c

    • SHA256

      e70684c0929b0713733778032e5b310bae9967f544febfe62009c820f71e950d

    • SHA512

      08f2f1f334757858333b72488fffeb283809d202bf09b40fb5a6a32f4abb57b42484793e8c79a4e53c50cac576cbbea2fadc8f06edeeca84774c6cb90527904a

    • SSDEEP

      12288:9oZOL+EP8sqcTR/k4XLG/BcoNPpUL8jNDxChcOtC+R:+I83cTR/k4XLG/BcoNPeLYND+

    Score
    10/10
    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

    • Drops file in Drivers directory

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks