Extracted

• • Target

    test.exe

  • Size

    231KB

  • MD5

    82a3b8db52f0c9fa3a8cea6bf73c7ead

  • SHA1

    a386e95563f337c95bb612fd1bcae63da5079aad

  • SHA256

    b8976bb4f059c9886d2dc60a5dfb3be07cf88326b2638cfab82c7187f00df39e

  • SHA512

    21330c77c7cdd0e9f73d7d383e447804a9e60904a672e3dbb839f160d4f765a85d1f0baf7b162f34c75fe509516391565b8af2d5d0212ffb7cb16cb026aef450

  • SSDEEP

    6144:KloZM+7EBw/S6NtFnEPfCJxTzTfpaGJCJoGrruODO8emmm0B:0oZmYS6NZLTzTfpaGJCJoGrruOts

  Score

  10^/10

  umbralstealer

  • Detect Umbral payload

  • Umbral

    Umbral stealer is an opensource moduler stealer written in C#.

    stealerumbral

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1