Overview

overview

10

Static

static

10

lol.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    lol.exe

  • Size

    227KB

  • Sample

    240401-xxzj1sch9y

  • MD5

    f7e108f3ea7ab6962d82ad4f6962a8ff

  • SHA1

    f9d9c0d3dd92b52710a579f2d5c60f6f13b377e0

  • SHA256

    9770183a26351c9ca249c5857093961ba4ddccea5098aaac898c7561a6d32e3a

  • SHA512

    dfa70b49c4b92242c6824cce1afaba46c332d3445d7075dec7ae02273c94c7f6e3c1e0ff47d618a2ca1764201a8cfef08d2e97f46ab72ecddc4a65f09c26a41f

  • SSDEEP

    6144:eloZM+rIkd8g+EtXHkv/iD4pepi6YXzQTp8aLLyo6b8e1m/i:IoZtL+EP8pepi6YXzQTp8aLLyn5

Score
10/10
umbralstealer

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1224434242570817699/5ZCADSZXw_vDza9J0PDFgsltf6OW01rd-bOhCy5wKw33O7Zr4iftMluQuXaEzCTKR2uO

Targets

    • Target

      lol.exe

    • Size

      227KB

    • MD5

      f7e108f3ea7ab6962d82ad4f6962a8ff

    • SHA1

      f9d9c0d3dd92b52710a579f2d5c60f6f13b377e0

    • SHA256

      9770183a26351c9ca249c5857093961ba4ddccea5098aaac898c7561a6d32e3a

    • SHA512

      dfa70b49c4b92242c6824cce1afaba46c332d3445d7075dec7ae02273c94c7f6e3c1e0ff47d618a2ca1764201a8cfef08d2e97f46ab72ecddc4a65f09c26a41f

    • SSDEEP

      6144:eloZM+rIkd8g+EtXHkv/iD4pepi6YXzQTp8aLLyo6b8e1m/i:IoZtL+EP8pepi6YXzQTp8aLLyn5

    Score
    10/10
    umbralstealer

    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

      stealerumbral
    behavioral1

MITRE ATT&CK Matrix

Tasks