General

  • Target

    skibidi skid who shall i steal today.exe

  • Size

    227KB

  • Sample

    241018-x7e85awdqk

  • MD5

    8f0d6e03ee2f791e3270d682778c4a3c

  • SHA1

    0f796d86fc10b2170d4e2875ae4bb7c157c01f67

  • SHA256

    9eefe406aa13dcf0b6e144ac5c78233fca22d813e22091dcfdc13deb82ca1925

  • SHA512

    f3c2521ff9a44cffa41800cf208c3230610bcd6037f76b9220880790106fa0adfea7d626c4aaf7ef4d15136296b5ee2c9fd03e1fde7fde63a74174021db3d2f1

  • SSDEEP

    6144:+loZM+rIkd8g+EtXHkv/iD4BC1bbhS6FAAxDeeb3k2+lb8e1mnwi:ooZtL+EP881bbhS6FAAxDeeb3ktCp

Score
10/10

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1296917578299478146/UJbiFDKAmfwXq8YVnbljtTQH4X9kuOdtEdG7wXePOW6My9ASOTzRLNkBwdY4C9qTKXzd

Targets

    • Target

      skibidi skid who shall i steal today.exe

    • Size

      227KB

    • MD5

      8f0d6e03ee2f791e3270d682778c4a3c

    • SHA1

      0f796d86fc10b2170d4e2875ae4bb7c157c01f67

    • SHA256

      9eefe406aa13dcf0b6e144ac5c78233fca22d813e22091dcfdc13deb82ca1925

    • SHA512

      f3c2521ff9a44cffa41800cf208c3230610bcd6037f76b9220880790106fa0adfea7d626c4aaf7ef4d15136296b5ee2c9fd03e1fde7fde63a74174021db3d2f1

    • SSDEEP

      6144:+loZM+rIkd8g+EtXHkv/iD4BC1bbhS6FAAxDeeb3k2+lb8e1mnwi:ooZtL+EP881bbhS6FAAxDeeb3ktCp

    Score
    10/10
    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks