Analysis
-
max time kernel
23s -
max time network
22s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
-
submitted
16-03-2024 21:26
General
-
Target
Umbral.exe
-
Size
230KB
-
MD5
10a62be7829b09b546511cfe6fabb84a
-
SHA1
fe599f4244ba26aa9329ee996fe3a612e677df31
-
SHA256
9f17ee652fae0bf1a3d12ea84e88526b4aae9fb1e440fdf9669f607f04d84f06
-
SHA512
4fbbcb0624d73a662c4aa4f28ba0cb71577d9cf2cb7fd5436e872d8d0341374751c0320252ff0ee756d82c81c106f8c084160f791824974eccb963e4cadea777
-
SSDEEP
6144:F1se+uecVM7hTSdm6836MZo+I/r8e1LCS:0H8VQv6MZo+u
Score
10/10
Malware Config
Signatures
-
Detect Umbral payload 1 IoCs
-
Umbral
Umbral stealer is an opensource moduler stealer written in C#.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Umbral.exe"C:\Users\Admin\AppData\Local\Temp\Umbral.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
256KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
64KB