umbral

General

Target

Hyper Optimizer.exe
Size

230KB
Sample

240309-rpmbtshg25
MD5

7e7635676ade59a517be0da76f172ecc
SHA1

d7e457621dcc9d5b463969566f3c76cd638e0f5c
SHA256

57d5d2edb1fa963a49a70a7f7505d07c2fcf9490f9d7067ed1cb36eeb15c278b
SHA512

af7fec5e6c53279e415a2269419e0844a28f489402ec6a9e82e85c48c2ee2dd31bea3caf70eba4c2090b33b31a27cf2efb52709cfe24a522c6c32ab463639f6d
SSDEEP

6144:lloZM0rIkd8g+EtXHkv/iD4EM0p/MS1NmLzus9x4H7b8e1mMi:noZDL+EP8D0p/MS1NmLzus9x4fa

Score

10^/10

umbral stealer

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1215982364816183417/LnYs1T4fBxsNzHnAFW25HaSy-o8vANns0if78D4o05ZioDFcZ7et7x4zRk-fKAYimweC

Targets

- Target
  
  Hyper Optimizer.exe
- Size
  
  230KB
- MD5
  
  7e7635676ade59a517be0da76f172ecc
- SHA1
  
  d7e457621dcc9d5b463969566f3c76cd638e0f5c
- SHA256
  
  57d5d2edb1fa963a49a70a7f7505d07c2fcf9490f9d7067ed1cb36eeb15c278b
- SHA512
  
  af7fec5e6c53279e415a2269419e0844a28f489402ec6a9e82e85c48c2ee2dd31bea3caf70eba4c2090b33b31a27cf2efb52709cfe24a522c6c32ab463639f6d
- SSDEEP
  
  6144:lloZM0rIkd8g+EtXHkv/iD4EM0p/MS1NmLzus9x4H7b8e1mMi:noZDL+EP8D0p/MS1NmLzus9x4fa
Score

10^/10

umbral stealer
- Detect Umbral payload
- Umbral
  Umbral stealer is an opensource moduler stealer written in C#.
  stealer umbral
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detect Umbral payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2