Extracted

• • Target

    Image Logger/Setup.bat

  • Size

    187B

  • MD5

    43b1a15e2307916cb5d7868cfe1fe562

  • SHA1

    84b20014f6138b2f526047d4cbf531037d4d3a0c

  • SHA256

    f330318d896d9b389dcb927c907c7ad599603b002435119403040c9a65beb125

  • SHA512

    689e974127c6ed97cb486e3597de090ad9f89faa2818c43ce11186d3f4a184a4b4a239abe1b86079a2c19da67ec3ff22315a0fc0e887905ab323129ef53c2555

  Score

  10^/10

  umbralstealer

  • Detect Umbral payload

  • Umbral

    Umbral stealer is an opensource moduler stealer written in C#.

    stealerumbral

  • Loads dropped DLL

  behavioral1behavioral2

• • Target

    Image Logger/Src/Files/upx.exe

  • Size

    229KB

  • MD5

    3191f1be1378fe37eb86efe885252351

  • SHA1

    e242bc1a4a1b09dc0936a966153449a7afd227ff

  • SHA256

    d5e77c60ebc90e48aa63369619fb8a048867aa1820c119371fb89d3b707324fc

  • SHA512

    f2e9f3bbc4456034a0d233f0aca93de4fd5177e028d8f3208248457bc061574ac1a3615e565ca9d54cf41f68df6ac6f03b44c0dbaae0f56cc569440f67af204a

  • SSDEEP

    6144:FloZM+rIkd8g+EtXHkv/iD4o+7Cw7ByallgRj++74T7b8e1mA9i:HoZtL+EP8V7Cw7ByallgRj++74DVU

  Score

  10^/10

  umbralstealer

  • Detect Umbral payload

  • Umbral

    Umbral stealer is an opensource moduler stealer written in C#.

    stealerumbral
  behavioral3behavioral4

• • Target

    Image Logger/Src/main.exe

  • Size

    12.3MB

  • MD5

    9c9dc758b34d719a4279bdf87e52f975

  • SHA1

    3a659e7c11832dc935696c93c7f9d81041f0522c

  • SHA256

    5925b2b709bfea787674db60f127a6117c60c88148317c9f9bb7cce8d4ff1316

  • SHA512

    fcedbbceebbed1d8cc3a2d148f951bc919e0fda5ca59eebc7c848b52844681451d97d0aede01cf9afe2ce942b87414479b141a4136c07db2fa52b5b8b4209091

  • SSDEEP

    393216:rI8DzgpgPYVnNSMF1+TtIiFavB5IjWqilzLyG3zE:r5DzgpgPQH1QtIx3ILi93

  Score

  7^/10

  • Loads dropped DLL

  behavioral5behavioral6

• • Target

    Image Logger/Start.bat

  • Size

    59B

  • MD5

    f43a646ca2cde87cc20f3756ad12e51c

  • SHA1

    2788e5da1348b7418356d2a485a40c7fb4697588

  • SHA256

    3ea2dd9cdd54135aaf47b196acbd4b54be5744be4fdfa022600e2cdd1cdf7d0c

  • SHA512

    3788d856a36cba78b147dfc4263682105cd4ddf6f6db701b4cbe95a4b449d397ff5d5f039a93dd77f055bb6db329f908796fb3ff0969a8070647ffc1c13fe7cb

  Score

  10^/10

  umbralstealer

  • Detect Umbral payload

  • Umbral

    Umbral stealer is an opensource moduler stealer written in C#.

    stealerumbral

  • Loads dropped DLL

  behavioral7behavioral8