Overview

overview

10

Static

static

10

PeerDistAD.exe

windows7-x64

10

PeerDistAD.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PeerDistAD.exe

  • Size

    229KB

  • Sample

    240315-1k6dksbg91

  • MD5

    afa8bb7e6708d4b5c056079f642b65f9

  • SHA1

    3cadcd7a2da0bc26fd7912f46bdc692e51752913

  • SHA256

    9041042642f5c0b67443490fc595aaaa1858c3a8582602969f1af568cad398e9

  • SHA512

    46392d04c3827a9f1602685bae2b10a69306839ce3af5b51889a70925e48654e0b8793ae4f68a4ce94f7c7dc71d0d69f0437583417b32cef9619024294351ed4

  • SSDEEP

    6144:lloZM+rIkd8g+EtXHkv/iD4Z/kJ2U7X8+toGnnGr8+cI8e1mAi:noZtL+EP8Z/kJ2U7X8+toGnnGr8S6

Score
10/10
umbralstealer

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1218255752314097764/pf1l_fyX4Y944q-tMNsmbSq2cfDBpqCBXuTvF0vyF76tkTcn3FOYasjrq_iM6NffJOYF

Targets

    • Target

      PeerDistAD.exe

    • Size

      229KB

    • MD5

      afa8bb7e6708d4b5c056079f642b65f9

    • SHA1

      3cadcd7a2da0bc26fd7912f46bdc692e51752913

    • SHA256

      9041042642f5c0b67443490fc595aaaa1858c3a8582602969f1af568cad398e9

    • SHA512

      46392d04c3827a9f1602685bae2b10a69306839ce3af5b51889a70925e48654e0b8793ae4f68a4ce94f7c7dc71d0d69f0437583417b32cef9619024294351ed4

    • SSDEEP

      6144:lloZM+rIkd8g+EtXHkv/iD4Z/kJ2U7X8+toGnnGr8+cI8e1mAi:noZtL+EP8Z/kJ2U7X8+toGnnGr8S6

    Score
    10/10
    umbralstealer

    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

      stealerumbral
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks