Extracted

• • Target

    release07052024.exe

  • Size

    234KB

  • MD5

    b7003ff817ee11ddb615fd88dd82fdcf

  • SHA1

    43cb7c473ddcff872931ed0628cf25543cd56593

  • SHA256

    2d1d0f47365bdb80e32d3378591b13b6412d2b67071d8083f95c8317cfa60fef

  • SHA512

    b5ba5b1c858623a2d75316199229fc2dad581200b874ef2907d795948d79605237e7195365d81eedf3c5db9cd8c1542d638cd94ca47fb9911502e6596269ec6e

  • SSDEEP

    6144:XloZM+rIkd8g+EtXHkv/iD4ZDmsN8e1mqtiU:1oZtL+EP8ZdG

  Score

  10^/10

  umbralstealer

  • Detect Umbral payload

  • Umbral

    Umbral stealer is an opensource moduler stealer written in C#.

    stealerumbral

  • Umbral family

    umbral

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2