Extracted

• • Target

    stub.bat

  • Size

    257KB

  • MD5

    192df095e220a68594056863421831b0

  • SHA1

    331e2fa042bdfe106939ef51aed189bcacc56779

  • SHA256

    a636e320333aa10ae6dfc2a18feedb06ca11fff33fbdcf4c6d535422275c8149

  • SHA512

    ef1f5d579324ae2e5629ac22d7c5d15d022c5455e93da8ac727da4d3aae4b9c17e0edcad2e6fe2b63a06f88dffbfd8df27db7fef287f26d41418b452eb221378

  • SSDEEP

    3072:MgIX3vJ9uIgVvEcPPJ2WeutPPYd0V6764o2CHZhPM8Kci/rm:MgYv3gVvvp2mISg78HTMx/rm

  Score

  10^/10

  executionumbralstealer

  • Detect Umbral payload

  • Umbral

    Umbral stealer is an opensource moduler stealer written in C#.

    stealerumbral

  • Deletes itself

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution
  behavioral1behavioral2