Extracted

• • Target

    5658f42d6332d99827d772a710d74e905f822d23e958c86f802973c2cffe850f

  • Size

    227KB

  • MD5

    7f32dcbb00de079c31ff7895ae9c0560

  • SHA1

    e80841a355b8dce9955b9bbba63f02a4ad31a836

  • SHA256

    5658f42d6332d99827d772a710d74e905f822d23e958c86f802973c2cffe850f

  • SHA512

    776cabc7d2442d90655eec0f434c811146b7f569dbace3c8609a582c167af5990ec25d1d7a8eb111744cecbdcd43d37af7d623eb97eb414ad926371083f7aadc

  • SSDEEP

    6144:bloZM+9EB1/SqctonEPfCqAu0+prdmK13Up7a6rhgj8e1m5l:5oZQdSqcwvu0+prdmK13Up7a6rhQM

  Score

  10^/10

  umbralstealer

  • Detect Umbral payload

  • Umbral

    Umbral stealer is an opensource moduler stealer written in C#.

    stealerumbral

  • Umbral family

    umbral

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2