General

  • Target

    spotifyfired.exe

  • Size

    231KB

  • Sample

    240520-kdbbvsbf73

  • MD5

    6a7d1aab031a0780d99a655022b65180

  • SHA1

    fbb429c748a66a57203e20af2815788a2999c9c1

  • SHA256

    66ea5b27209bd7926f3715108d7c7b37fa171f8fa91697e8b14810835c0ddb39

  • SHA512

    5680eb4868060d3d16bc38fdba2aba2f50cb189bd0929260cde6890e1551e545125d8e2383848ff740ed2f406b1d0a45aa4b5ac0cab8b5b526ca35a877bce8d5

  • SSDEEP

    6144:xloZM+rIkd8g+EtXHkv/iD4Cno2p3cw/ceHp0AV3h6lS8e1mdl2i:DoZtL+EP8So2p3cw/ceHp0AVsi4l7

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1242030455545659544/jdxeZ0Ed43Ez4BGNXnOKsGcxqX-N0ShwvNEdlslCsbY4McuJJJcB_uxzFaDb5J8i9kaO

Targets

    • Target

      spotifyfired.exe

    • Size

      231KB

    • MD5

      6a7d1aab031a0780d99a655022b65180

    • SHA1

      fbb429c748a66a57203e20af2815788a2999c9c1

    • SHA256

      66ea5b27209bd7926f3715108d7c7b37fa171f8fa91697e8b14810835c0ddb39

    • SHA512

      5680eb4868060d3d16bc38fdba2aba2f50cb189bd0929260cde6890e1551e545125d8e2383848ff740ed2f406b1d0a45aa4b5ac0cab8b5b526ca35a877bce8d5

    • SSDEEP

      6144:xloZM+rIkd8g+EtXHkv/iD4Cno2p3cw/ceHp0AV3h6lS8e1mdl2i:DoZtL+EP8So2p3cw/ceHp0AVsi4l7

    Score
    10/10
    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

MITRE ATT&CK Enterprise v15

Tasks