Analysis
-
max time kernel
144s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
15-06-2024 11:05
General
-
Target
Umbral.exe
-
Size
231KB
-
MD5
c6d9062fe7fa14a33531fab3d8d53e04
-
SHA1
9324cc22d65cfaaa4b4b35c978db9e5039d36c2b
-
SHA256
4df5b468a1be632ec9814e7060ab85d055c75dd913b48c24a978d7357f377449
-
SHA512
ed30c2a44431900279dc0ecf6325971bcb22149b3143c0c1ca4b5b0ea3f3a5ce85617b8c317b93bdfdfff4afd349330242c68578d8755f31ef48663efe41849d
-
SSDEEP
6144:xloZM+rIkd8g+EtXHkv/iD4Ooph/1+mpesl3ySX4MvHb8e1mv4li:DoZtL+EP8Ooph/1+mpesl3ySXpJs
Score
10/10
Malware Config
Signatures
-
Detect Umbral payload 1 IoCs
-
Umbral
Umbral stealer is an opensource moduler stealer written in C#.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Umbral.exe"C:\Users\Admin\AppData\Local\Temp\Umbral.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
256KB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
10.8MB