Overview

overview

10

Static

static

10

Umbral.Steal.zip

windows11-21h2-x64

1

Analysis

  • max time kernel
    102s
  • max time network
    95s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240412-en
  • resource tags

    arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    24-04-2024 15:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Umbral.Steal.zip

  • Size

    3.5MB

  • MD5

    6e28bd5c4e3f3f6b489837625e31354a

  • SHA1

    bf4da4ec8ec45f661b52923851470989fd5bcfc8

  • SHA256

    40c8bb264b2f753c6af1b6386a7e30e1e919df0109ea764e68563b241162420a

  • SHA512

    2ba1eea653f947079f8412a9d55d82c73dbcb37c70951786c080424acd9ea0936f3c1c43242bf92b1d228dad51706c1e6b915b094ebab20e90dcdd18f433c109

  • SSDEEP

    98304:+K3l+9x9v+OkLlxsfEddRVgRfzE525v+VjvfJtEQkb3x+/x0USitE:+l9xlZ+vkEdd2fQKmjJvCcSOE

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Umbral.Steal.zip
    1⤵
      PID:4764
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:2644
      • C:\Users\Admin\Documents\Umbral.Steal\Umbral.Steal\Umbral.builder.exe
        "C:\Users\Admin\Documents\Umbral.Steal\Umbral.Steal\Umbral.builder.exe"
        1⤵
          PID:1748
        • C:\Users\Admin\Documents\Umbral.Steal\Umbral.Steal\Umbral.builder.exe
          "C:\Users\Admin\Documents\Umbral.Steal\Umbral.Steal\Umbral.builder.exe"
          1⤵
            PID:3556

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads