General

  • Target

    RC7.exe

  • Size

    232KB

  • Sample

    241016-r2dv8avdjb

  • MD5

    d59f28e91f0758221b66e6f5c4cc793c

  • SHA1

    5cf89331e57cabba6b6844ee0d1ee3bb5916c7a2

  • SHA256

    839498d96202c30898aefe9567bf03a5612f437829886b3d6db1839c9d058466

  • SHA512

    ee27b92796473a021a104581d950438a367a37dd7214b73ef70af59cccfe64e6460a38fabc7a2e9f1a77194e99902e280823701499f8212a7df64151f10bf642

  • SSDEEP

    6144:RloZM+rIkd8g+EtXHkv/iD4o3l8rRiK1ewBzOuraAb8e1mw4i:joZtL+EP8o3l8rRiK1ewBzOur/hB

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1262147610945257512/-Xu4FqLQWfZqO1H3sHq_KSG7s3qtQIL5BdKpMFImGF_9c9qqUxPhCF93j4QPRYy0qrxt

Targets

    • Target

      RC7.exe

    • Size

      232KB

    • MD5

      d59f28e91f0758221b66e6f5c4cc793c

    • SHA1

      5cf89331e57cabba6b6844ee0d1ee3bb5916c7a2

    • SHA256

      839498d96202c30898aefe9567bf03a5612f437829886b3d6db1839c9d058466

    • SHA512

      ee27b92796473a021a104581d950438a367a37dd7214b73ef70af59cccfe64e6460a38fabc7a2e9f1a77194e99902e280823701499f8212a7df64151f10bf642

    • SSDEEP

      6144:RloZM+rIkd8g+EtXHkv/iD4o3l8rRiK1ewBzOuraAb8e1mw4i:joZtL+EP8o3l8rRiK1ewBzOur/hB

    Score
    10/10
    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

MITRE ATT&CK Matrix

Tasks