Analysis
-
max time kernel
0s -
max time network
3s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
09-05-2024 02:10
General
-
Target
PulseLoader 3.4 x64.exe
-
Size
234KB
-
MD5
dece225e18c1c2791fed6062c97a6322
-
SHA1
06d68036d8da0fb7b45a33bcfc14d8f72c9e68a8
-
SHA256
e13794d15691acbbd898adcbbca15b903ee738c46ad7237d5d8e018385eeb4e0
-
SHA512
1c1da44b6aa350751877ddda9d7d12b087bc9c4cbf73449bacbdcb2a4a510f92dbfb21f11f9e5613a9cb9ad570dd9096ebe278b6cd4d066c344975e1c8e76350
-
SSDEEP
6144:MloZM+rIkd8g+EtXHkv/iD4xIyh4+ZRSJ3q459ckNb8e1mxi:KoZtL+EP8xIyh4+ZRSJ3q459cUD
Score
10/10
Malware Config
Signatures
-
Detect Umbral payload 1 IoCs
-
Umbral
Umbral stealer is an opensource moduler stealer written in C#.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\PulseLoader 3.4 x64.exe"C:\Users\Admin\AppData\Local\Temp\PulseLoader 3.4 x64.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
256KB
-
Filesize
9.9MB