Extracted

• • Target

    BLUME RUST.exe

  • Size

    227KB

  • MD5

    de788e456ceac91e1dd1a2ed01d332cc

  • SHA1

    d0a59e876e3781b70379127425612c9cb1a99436

  • SHA256

    559a3d56b0318e3e66e68e92079a8fd4f04adb5c6c3899d06b4ad66cccc19cdd

  • SHA512

    41daddd8548376e9c6f161c113c7a7721b2c683aa361dcfb4341906e45f78ec053242fb2a221b622e229c4967f04c04d7a4e3436cc4fddf2054db3e9907d2b6a

  • SSDEEP

    6144:eloZM+rIkd8g+EtXHkv/iD4cwuciAfboNxUyzzqlUob8e1mKi:IoZtL+EP8cwuciAfboNxUyzzqVE

  Score

  10^/10

  umbralstealer

  • Detect Umbral payload

  • Umbral

    Umbral stealer is an opensource moduler stealer written in C#.

    stealerumbral

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1