General

  • Target

    https://github.com/Blank-c/Umbral-Stealer

  • Sample

    240401-xm7gwada65

Score
10/10

Malware Config

Targets

    • Target

      https://github.com/Blank-c/Umbral-Stealer

    Score
    10/10
    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

    • Executes dropped EXE

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks