Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
13-06-2024 20:30
General
-
Target
Copped.exe
-
Size
434KB
-
MD5
61eb747d9aca2e32df170bfe5cd278ed
-
SHA1
e7086ca9616727f0d612c12e5e19200f98b35b26
-
SHA256
2902b2d11793853c4ca9a23168b421afed4aacf0f345cc7ba955b2ae9cd61605
-
SHA512
6ea3dffbfb9071c506affd7b1c6f4cc3d6c911775b4df31adb8f25c75d99f536c67fcdddf4d107d1f6e969d6155fef738015d756ed8b936ca7f354ba554a8952
-
SSDEEP
12288:xoZZL+EP8MzMQQWRJ6TvSgR1ExP42u9ODA53:zI86MQQWRJ6TvSgR1Ext
Score
10/10
Malware Config
Signatures
-
Detect Umbral payload 1 IoCs
-
Umbral
Umbral stealer is an opensource moduler stealer written in C#.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Copped.exe"C:\Users\Admin\AppData\Local\Temp\Copped.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
456KB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB