Overview

overview

10

Static

static

10

celex.exe

windows7-x64

10

celex.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    celex.exe

  • Size

    227KB

  • Sample

    240318-gpl1yshh75

  • MD5

    f16dec0bdfdb9ae71b1b410c6ed815ec

  • SHA1

    10077d4bbc449011fdebc06810fc2196873eaf86

  • SHA256

    d94fca1806e2fd56a8d56dd4599ba69f39633a0247b78922773da7504d51cf19

  • SHA512

    3b9d0b195eb8348fb44739d9a703228113c9810f50e9d145eaac0e8642dbac9435b593be7f982f4b0c041b6bc635b2b14da5fcba577004e3e25f77a2b7ad071e

  • SSDEEP

    6144:eloZM+rIkd8g+EtXHkv/iD4oAWfecjfUQ1gevPec5/b8e1mPi:IoZtL+EP8oAWfecjfUQ1gevPecNR

Score
10/10
umbralstealer

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1217652066793685103/5707GecBA1Oh6wbHm2CNmyvZn-uWR33dbgdoUwBUHJoiBrsmqxNwEWoYGsbn7dx1KF7f

Targets

    • Target

      celex.exe

    • Size

      227KB

    • MD5

      f16dec0bdfdb9ae71b1b410c6ed815ec

    • SHA1

      10077d4bbc449011fdebc06810fc2196873eaf86

    • SHA256

      d94fca1806e2fd56a8d56dd4599ba69f39633a0247b78922773da7504d51cf19

    • SHA512

      3b9d0b195eb8348fb44739d9a703228113c9810f50e9d145eaac0e8642dbac9435b593be7f982f4b0c041b6bc635b2b14da5fcba577004e3e25f77a2b7ad071e

    • SSDEEP

      6144:eloZM+rIkd8g+EtXHkv/iD4oAWfecjfUQ1gevPec5/b8e1mPi:IoZtL+EP8oAWfecjfUQ1gevPecNR

    Score
    10/10
    umbralstealer

    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

      stealerumbral
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks