Analysis
-
max time kernel
95s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21-12-2024 06:55
General
-
Target
Stub/Stub.exe
-
Size
219KB
-
MD5
3e12195a81c4a1fce97e3993a895dbd7
-
SHA1
9a4e7568b3f6ab2c68869882b7a9c49d52b2a61e
-
SHA256
a44af3b0054917bf21fde1ea841aec196e786e4d3e34f817f16aa28994e1debb
-
SHA512
ea9257315bd35e1c8d6738b9e21dde24369f4c6ff7a4feeb1b8586939678125bd93ee0cea10f2360b3d4594e0d617657362694f8ff5d578580d94d87c3073ef6
-
SSDEEP
3072:SF0UWgzqk8SEhcEzSCKwdxGlgxS2I8e3/N/IVsFiOXmHw:2IgzqkjEzSCqKo8e3/JUs0
Score
10/10
Malware Config
Signatures
-
Detect Umbral payload 1 IoCs
-
Umbral
Umbral stealer is an opensource moduler stealer written in C#.
-
Umbral family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Stub\Stub.exe"C:\Users\Admin\AppData\Local\Temp\Stub\Stub.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
248KB