Extracted

• • Target

    e9585371c2455ea483f3603b5cf1f9d5756e2539bdaabcf91349f19007c59d42N

  • Size

    312KB

  • MD5

    2f2364e31c5e0194321d8ef18948ca60

  • SHA1

    164d0848c47557ab54fa08a1e21214d93ee79db9

  • SHA256

    e9585371c2455ea483f3603b5cf1f9d5756e2539bdaabcf91349f19007c59d42

  • SHA512

    20ea520f1b5b928f1a249c8240edeb646d33cefd4b31b41fdd7b1dd80f4e18670008d262b7e617d033c2d8049032a7a03007fd5d865e32d1e0bbabacd388ab6f

  • SSDEEP

    6144:lloZM+rIkd8g+EtXHkv/iD4kBO8n9GuBm0dP6aP4Pb8e1m3iQsAGPi5PzRgJZc5:noZtL+EP8kBO8n9GuBm0dP6aPCxQsVGC

  Score

  10^/10

  umbralstealer

  • Detect Umbral payload

  • Umbral

    Umbral stealer is an opensource moduler stealer written in C#.

    stealerumbral

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2