General

  • Target

    Umbral.exe

  • Size

    229KB

  • Sample

    240428-wr8easdg6y

  • MD5

    ac6dc91bec5d51b9b8f7b36642f875db

  • SHA1

    ebf088795549ec27047225f14b3263c7b022168e

  • SHA256

    cb32d0fc4534e19ae8009edacbe41b2aac5755b8c7bf233fd4c9b39a00f9b318

  • SHA512

    d44f953ea4aac986c5eea7242ad0d0b6143117781ab9f35537523ad0f4cf95b23c5aeb223ba74febba96afd9006b3f20edbc2bba2113661aa6d56368c93598da

  • SSDEEP

    6144:tloZM+rIkd8g+EtXHkv/iD4qacRCg/7IER0STTKreb8e1mHi:voZtL+EP8qacRCg/7IER0STTK2Z

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1234183133469872269/MIIOnNo8VcCEi5VwyIjRjJPVNZay1YPhZPz-L35nkeXNLLX5C-iO19uzba-gTFrjoLTw

Targets

    • Target

      Umbral.exe

    • Size

      229KB

    • MD5

      ac6dc91bec5d51b9b8f7b36642f875db

    • SHA1

      ebf088795549ec27047225f14b3263c7b022168e

    • SHA256

      cb32d0fc4534e19ae8009edacbe41b2aac5755b8c7bf233fd4c9b39a00f9b318

    • SHA512

      d44f953ea4aac986c5eea7242ad0d0b6143117781ab9f35537523ad0f4cf95b23c5aeb223ba74febba96afd9006b3f20edbc2bba2113661aa6d56368c93598da

    • SSDEEP

      6144:tloZM+rIkd8g+EtXHkv/iD4qacRCg/7IER0STTKreb8e1mHi:voZtL+EP8qacRCg/7IER0STTK2Z

    Score
    10/10
    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

MITRE ATT&CK Matrix

Tasks