Overview

overview

10

Static

static

10

NiggaDrv.exe

windows7-x64

10

NiggaDrv.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NiggaDrv.exe

  • Size

    229KB

  • Sample

    240320-rsefdsbd3w

  • MD5

    b3b96ea3275dd1f16fea840f735656d9

  • SHA1

    2a18b0fb20a8d3361b3744242b7c4939816985b8

  • SHA256

    0179d68051bc377127ffe0e983a1498646b746b5ef7ad5a83f6f062a4b9d1f61

  • SHA512

    0b016997326d3a324c3733900cbbd69111c2d6d1dcc8e7f349495dda38b8e8481d94a2bdfdc01830429c8eaf169c80525338ef20b133f441fdbd0c8d9c125e5e

  • SSDEEP

    6144:lloZMFrIkd8g+EtXHkv/iD4POT1Cg/7I3R0STTKbKb8e1m1j+Yi:noZOL+EP8POT1Cg/7I3R0STTKiUY

Score
10/10
umbralstealer

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1218976386673414314/pgatA7CWdO29JuDrMGLeYuJVp4uBB8reNu0_hcBKUggMDpfIHkxs20eYp5lxUucsIEdw

Targets

    • Target

      NiggaDrv.exe

    • Size

      229KB

    • MD5

      b3b96ea3275dd1f16fea840f735656d9

    • SHA1

      2a18b0fb20a8d3361b3744242b7c4939816985b8

    • SHA256

      0179d68051bc377127ffe0e983a1498646b746b5ef7ad5a83f6f062a4b9d1f61

    • SHA512

      0b016997326d3a324c3733900cbbd69111c2d6d1dcc8e7f349495dda38b8e8481d94a2bdfdc01830429c8eaf169c80525338ef20b133f441fdbd0c8d9c125e5e

    • SSDEEP

      6144:lloZMFrIkd8g+EtXHkv/iD4POT1Cg/7I3R0STTKbKb8e1m1j+Yi:noZOL+EP8POT1Cg/7I3R0STTKiUY

    Score
    10/10
    umbralstealer

    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

      stealerumbral
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks