Extracted

• • Target

    8657233b83ae7fa42534243b618700431733bf4edc9d97864e250fa15d95592d

  • Size

    229KB

  • MD5

    24233839190b24bee9fb8442540bfbfd

  • SHA1

    ca3a499080cbef642d1ad8e677a82111df491a96

  • SHA256

    8657233b83ae7fa42534243b618700431733bf4edc9d97864e250fa15d95592d

  • SHA512

    7895bc79817bbe298970535e41ce9db9b11bbfd1fcfd32dd0346e48d6596130375d894d76c70c2bd45c154de131e5de74e4d86400f90d9b7ac52ae8cce819190

  • SSDEEP

    6144:2loZMD9EB1/SqctonEPfCqAOYiElX8k7J+btUgJB7j8e1m1DZ:AoZpdSqcwvOYiElX8k7J+btUgJB3w

  Score

  10^/10

  umbralstealer

  • Detect Umbral payload

  • Umbral

    Umbral stealer is an opensource moduler stealer written in C#.

    stealerumbral

  • Detects executables attemping to enumerate video devices using WMI

  • Detects executables containing possible sandbox analysis VM names

  • Detects executables containing possible sandbox analysis VM usernames

  • Detects executables containing possible sandbox system UUIDs

  behavioral1behavioral2