Extracted

• • Target

    1a2d5e69f1dbd608bb2630f7c8ae2a07dc2fe5cdec2376319937bf7f62d468a4N

  • Size

    5.3MB

  • MD5

    dc21bdd709b0043081f9d593c5eb0950

  • SHA1

    82b88aef7c24f5e4fb94d9cd619b2cf02d49482d

  • SHA256

    1a2d5e69f1dbd608bb2630f7c8ae2a07dc2fe5cdec2376319937bf7f62d468a4

  • SHA512

    b9d0ef3eb6611dc7b7649996da3da0ffcfc7c00af6735342d793acae766b0108ed815fb4d72ae98208e542dc3d704e1c2c3d9f384e3226559becc65ad7a4c5d5

  • SSDEEP

    98304:xivmGMDlsrwXdxIjBy6e5UZpqk8PEYw53:xvGMBpXdxIjByj5QpqfJQ

  Score

  10^/10

  umbraldiscoverystealer

  • Detect Umbral payload

  • Umbral

    Umbral stealer is an opensource moduler stealer written in C#.

    stealerumbral

  • Umbral family

    umbral

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2