General

  • Target

    Saransk.exe

  • Size

    231KB

  • Sample

    240617-kef9hawglr

  • MD5

    acca3f3236c113ab4c20d8697eeaeaca

  • SHA1

    c921b69ba68786a49ed6c7ec92dac8f42700275c

  • SHA256

    75f18abe6b6d94ca03e91c6eddbfaee49827e731ba78e62f4f47e890fb9dbe53

  • SHA512

    787a595f745f26dcb569fe1f3beb0b90206d6bcc7e4d8a62b7e3fabf4f2435410621aec5d2b4327d357b2d3f240430974b592e23d0a247e9a082659ff6bdf39c

  • SSDEEP

    6144:xloZM+rIkd8g+EtXHkv/iD4Ycpc4+ZRS63q459c2tb8e1mYoi:DoZtL+EP8Ycpc4+ZRS63q459cu/R

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1252168499489407067/Q1e6m53iIsS9AsIAU1dJzTmBY6KFX7wQjA-70SAwLfA3STehGFJ_2t0YbeTIwurNb8Gl

Targets

    • Target

      Saransk.exe

    • Size

      231KB

    • MD5

      acca3f3236c113ab4c20d8697eeaeaca

    • SHA1

      c921b69ba68786a49ed6c7ec92dac8f42700275c

    • SHA256

      75f18abe6b6d94ca03e91c6eddbfaee49827e731ba78e62f4f47e890fb9dbe53

    • SHA512

      787a595f745f26dcb569fe1f3beb0b90206d6bcc7e4d8a62b7e3fabf4f2435410621aec5d2b4327d357b2d3f240430974b592e23d0a247e9a082659ff6bdf39c

    • SSDEEP

      6144:xloZM+rIkd8g+EtXHkv/iD4Ycpc4+ZRS63q459c2tb8e1mYoi:DoZtL+EP8Ycpc4+ZRS63q459cu/R

    Score
    10/10
    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

MITRE ATT&CK Matrix

Tasks