Overview

overview

10

Static

static

10

Umbral.exe

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Umbral.exe

  • Size

    232KB

  • Sample

    241001-qq2bpswaqg

  • MD5

    37974e87e6ab2f57a45f6a59f774d5a0

  • SHA1

    af8b0ce0a30c70f23ec081cc9c713f200c931241

  • SHA256

    d49509d2f27099e6884319fc50b7cecd8cf837ef1af03d9516a558e54bc7b8e8

  • SHA512

    1f17d68a77894f28ab09fbec5d9f499425523512de19b81829dda7b613ddd7a2fadc937ed3933f28048a45cc678a79813ad0e767f6585f60286fd45db44f6344

  • SSDEEP

    6144:IloZM+rIkd8g+EtXHkv/iD47xX5kuMzvE5lwOffumn/x0i8e1mi5i:WoZtL+EP8795kuMzvE5lwOffumnrpg

Score
10/10
umbralstealer

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1289114395871412300/0iCMqyg2_DeWYKwptdJz9Esfw_fTNZHnZrY5jnPzsK-oQVEMZnCBGS8p4EiLLZsDIdCf

Targets

    • Target

      Umbral.exe

    • Size

      232KB

    • MD5

      37974e87e6ab2f57a45f6a59f774d5a0

    • SHA1

      af8b0ce0a30c70f23ec081cc9c713f200c931241

    • SHA256

      d49509d2f27099e6884319fc50b7cecd8cf837ef1af03d9516a558e54bc7b8e8

    • SHA512

      1f17d68a77894f28ab09fbec5d9f499425523512de19b81829dda7b613ddd7a2fadc937ed3933f28048a45cc678a79813ad0e767f6585f60286fd45db44f6344

    • SSDEEP

      6144:IloZM+rIkd8g+EtXHkv/iD47xX5kuMzvE5lwOffumn/x0i8e1mi5i:WoZtL+EP8795kuMzvE5lwOffumnrpg

    Score
    10/10
    umbralstealer

    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

      stealerumbral
    behavioral1

MITRE ATT&CK Matrix

Tasks