General
- Target Umbral.Stealer.zip
- Size 3.3MB
- Sample240328-p4cd3aef31
- SHA256 8e95865efd39220dfc4abebc27141d9eae288a11981e43f09cbee6bf90347fe0
- MD5 f355889db3ff6bae624f80f41a52e619
- SHA1 47f7916272a81d313e70808270c3c351207b890f
- SHA512 bff7636f6cc0fadfd6f027e2ebda9e80fd5c64d551b2c666929b2d990509af73b082d739f14bb1497be292eafe703ebd5d7188493e2cc34b73d249fe901820eb
- SSDEEP 98304:XINn7mVoLvbDU48xzliDSjtYV2jg0tsGTplmOhl88uF:mjLvvD8BcSjtAB0zplNl8Z
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Umbral.Stealer.zip
Resource
win7-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Umbral.Stealer.zip
Resource
win10v2004-20240319-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Umbral.Stealer.zip
- Size 3.3MB
- SHA256 8e95865efd39220dfc4abebc27141d9eae288a11981e43f09cbee6bf90347fe0
- MD5 f355889db3ff6bae624f80f41a52e619
- SHA1 47f7916272a81d313e70808270c3c351207b890f
- SHA512 bff7636f6cc0fadfd6f027e2ebda9e80fd5c64d551b2c666929b2d990509af73b082d739f14bb1497be292eafe703ebd5d7188493e2cc34b73d249fe901820eb
- SSDEEP 98304:XINn7mVoLvbDU48xzliDSjtYV2jg0tsGTplmOhl88uF:mjLvvD8BcSjtAB0zplNl8Z
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Legitimate hosting services abused for malware hosting/C2