Analysis
-
max time kernel
144s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
06-07-2024 03:20
General
-
Target
c045a0feb21965b697ce7c6abcf68d94.exe
-
Size
8.0MB
-
MD5
c045a0feb21965b697ce7c6abcf68d94
-
SHA1
bd60e3aa141a2ed4dbb11313be29fadc9fb50b6a
-
SHA256
2a068fd9cec974e59a74ab132f781f9c69cb5b620e562f05d514d7720752ae64
-
SHA512
013661d73b8140304a8578b9d903e9192aed82ce1dc244065284a5ae5ed83482e23a302dd164243959468bbd2b124e1b892373737f9c95ad85aba699159be20a
-
SSDEEP
6144:RloZM+rIkd8g+EtXHkv/iD4TNXVBoOJBiPHaIJtM1ub8e1m6i:joZtL+EP8xXVBoOJBiPHaIJtMEA
Score
10/10
Malware Config
Signatures
-
Detect Umbral payload 1 IoCs
-
Umbral
Umbral stealer is an opensource moduler stealer written in C#.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c045a0feb21965b697ce7c6abcf68d94.exe"C:\Users\Admin\AppData\Local\Temp\c045a0feb21965b697ce7c6abcf68d94.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
256KB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
10.8MB