Extracted

• • Target

    Unban Global HWID/Cleaner.exe

  • Size

    229KB

  • MD5

    00b50ac019d337a11d626cb5e48931a3

  • SHA1

    fab828f25f492a1a8f6e8f112f95daf5fb7ba209

  • SHA256

    bf5ed21104c2406217f2629ea5dac416172e4f7019817ae9fe81d5925c656936

  • SHA512

    8fab8f9fe41049a725df6bf275cf2f8e121c048f20f1608534d7118770ce096242481af1f38fb0ede9e34c8808e45bee80dfa06424a604544c10688e31610000

  • SSDEEP

    6144:lloZMCrIkd8g+EtXHkv/iD4p5NZf9rI8j667NokRg9/b8e1myi:noZZL+EP8pnZf9rI8j667NokRss

  Score

  10^/10

  umbralspywarestealer

  • Detect Umbral payload

  • Umbral

    Umbral stealer is an opensource moduler stealer written in C#.

    stealerumbral

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1