Analysis
-
max time kernel
144s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
02-07-2024 08:19
General
-
Target
test.exe
-
Size
232KB
-
MD5
5efa80ce88a765c6603129c757b21a07
-
SHA1
f5ceec0c07fdce0a9bbb8400372395082dc0c308
-
SHA256
685f538f83141a64cc51aefe1bc4047c3628c8b27e356ae21896c2722c35dfc7
-
SHA512
c9f95fc1bd2fed8e0db78f2e212dd3e694b9a4550499c04d4376a538f1eaf59e24f5fb8c667b3d4c1525b93a6e460d02493493b9c5b2a427b628fd3d8573c8cd
-
SSDEEP
6144:BloZMzrIkd8g+EtXHkv/iD4h8ko1DA0r3SjVg8Zb3b8e1mPi:zoZcL+EP8h8ko1DA0r3SjVg8Zfh
Score
10/10
Malware Config
Signatures
-
Detect Umbral payload 1 IoCs
-
Umbral
Umbral stealer is an opensource moduler stealer written in C#.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\test.exe"C:\Users\Admin\AppData\Local\Temp\test.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
256KB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
10.8MB