Overview

overview

10

Static

static

10

Krampus/b5...Rl.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Krampus.rar

  • Size

    79KB

  • Sample

    241108-td9dbstrbs

  • MD5

    75feae218b03a45d1be3f932f353db7b

  • SHA1

    2eef6e858b38c3c5fece824be164debe55e66f2c

  • SHA256

    ed5fe58c45c8b0e48c4c9405ba8065234090e19e145465117e0d2342f43fd872

  • SHA512

    f13949102f6d6117af5f976cd60dc95315b2be20379d2f7bf4606feffa795a69238d1a84f30288d7e1b45fb407dca583bd17cc9cae3bf129feeb4c2526a0a831

  • SSDEEP

    1536:QLU12qQoZKf09z7AgmdFlLLpfOi96k3wu/ad5Z3uxj7TOpYrJtJ4:QmhgqQgmVLx925ZYX/e

Score
10/10
umbralstealer

Malware Config

Extracted

Family

umbral

C2

https://discord.com/api/webhooks/1225264880039235738/46bNxRt60w9YjuGcjqkvDLT2Saa0gXhoe7P2-CbuUHwdxfwONEkNG92CHxRK6S67a3Bd

Targets

    • Target

      Krampus/b5uEJHZB6Rl.exe

    • Size

      231KB

    • MD5

      438289fb9c72ed39bf5497f9af21ec7a

    • SHA1

      8120391ecb41ed6a4c6ef0b259776e59311d6997

    • SHA256

      ea4cb7c7b4cfb2fcc04d1c3f96b20c26638e69a97b15cae14659f0d6afb78f85

    • SHA512

      3647907fa2d503a242ef07cb20b081444b75e0c618a91232c8e77903b4b6aa823b8a7cbe07a45e02591fe48fdd23b5eae88565006b85863c0a5f6e42d7589fe0

    • SSDEEP

      6144:YloZM+rIkd8g+EtXHkv/iD4Bs4DdLocD/abtIEx6tb8e1mTiu:GoZtL+EP8Bs4DdLocD/abtIExq1

    Score
    10/10
    umbralstealer

    • Detect Umbral payload

    • Umbral

      Umbral stealer is an opensource moduler stealer written in C#.

      stealerumbral

    • Umbral family

      umbral

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Matrix

Tasks