Analysis
- max time kernel
0s - max time network
6s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
18/03/2024, 01:00
General
- Target 23bbb1d349bca5e6f35b2abe9ff078a6.exe
- Size 230KB
- Sample240318-bcvjnsdc4t
- SHA256 30ad64434af97756c659a8b7f95efb915dcb18417ebbe373892e75bbdc6d3b13
Score
10/10
Malware Config
Signatures
- Detect Umbral payload 1 IoCs
- Umbral
Umbral stealer is an opensource moduler stealer written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\23bbb1d349bca5e6f35b2abe9ff078a6.exe"C:\Users\Admin\AppData\Local\Temp\23bbb1d349bca5e6f35b2abe9ff078a6.exe"1⤵
-
C:\Windows\System32\Wbem\wmic.exe"wmic.exe" csproduct get uuid2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/748-0-0x0000018346A10000-0x0000018346A50000-memory.dmp
memory/748-1-0x00007FFE2D4D0000-0x00007FFE2DF91000-memory.dmp
memory/748-2-0x0000018348610000-0x0000018348620000-memory.dmp