Extracted

• • Target

    Umbral.bin.exe.bin

  • Size

    232KB

  • MD5

    1377d5688f3780885e77a0ec534be5b7

  • SHA1

    91628df86ab2fdf204781d970d0635103a01aa1d

  • SHA256

    f925d39bf8715d44d8558e287076c2783318767b3dda49715147cb38a762c5a2

  • SHA512

    b4fb4e7d708fc1167d193e44ce8b44187e2ac69b8bfa522f7b2e8d9871eebefc6b60e9521aa7e444c3c21b986112b4c2f91ced78d2a9b2bc79b569817c4564c2

  • SSDEEP

    6144:KloZM+rIkd8g+EtXHkv/iD4/fvrsyVtGDTOMdWDjo+b8e1mNoi:0oZtL+EP8/fvrsyVtGDTOMdWDvQ

  Score

  10^/10

  umbralstealer

  • Detect Umbral payload

  • Umbral

    Umbral stealer is an opensource moduler stealer written in C#.

    stealerumbral

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1