Analysis
-
max time kernel
15s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
08-09-2024 22:20
General
-
Target
nitro tools/nitro.exe
-
Size
254KB
-
MD5
943a2791a4d420fe5419e7a712b2389b
-
SHA1
00a02e7b5061dd71b16c2be8b14449bf4064f076
-
SHA256
9708125c30cd5a908da8bacd3e96869207dee7d0f8327eddc7f59fd329972f1a
-
SHA512
99d8b32aeb0ca7677fd20ba58eb81b34c745bf7c9498d48b56f87804018f7ebc016ed043e376a876e4b4b1ae8e4b9daef6e215f3b61683936cb14b92fdf2f9f2
-
SSDEEP
6144:K4oZoAeVHPtHgTIAaZgCwDx7axHU0unC28ejI8l7:xoZyHPvWCwjXCsI0
Score
10/10
Malware Config
Signatures
-
Detect Umbral payload 1 IoCs
-
Umbral
Umbral stealer is an opensource moduler stealer written in C#.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\nitro tools\nitro.exe"C:\Users\Admin\AppData\Local\Temp\nitro tools\nitro.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
280KB
-
Filesize
9.9MB
-
Filesize
4KB
-
Filesize
9.9MB