Analysis
-
max time kernel
12s -
max time network
17s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
15-01-2025 12:08
General
-
Target
Solara Bootstrapper.V210.exe
-
Size
231KB
-
MD5
a3b5e75b75b23ccdc2d0ad1f6cdce98c
-
SHA1
a78fa26acdfb97af1ff1ba42d5467f9c90162b4a
-
SHA256
f0bfbd7e921feaaf6d0b701cf58fa72e665fb20cc945bdb5ebf22c4c436eb6a7
-
SHA512
5e51aa1e84378573cda2920d17e5c0737c5c432a074324dffa2b0313794519c10b66e27c99f8d59c261b8c0b6481e3135c524c3ef6b8a8331898a0840689d9a3
-
SSDEEP
6144:BloZM+rIkd8g+EtXHkv/iD4WAaJdLocD9abtIExcqb8e1m85i:zoZtL+EP8WAaJdLocD9abtIExHe
Score
10/10
Malware Config
Signatures
-
Detect Umbral payload 1 IoCs
-
Umbral
Umbral stealer is an opensource moduler stealer written in C#.
-
Umbral family
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Solara Bootstrapper.V210.exe"C:\Users\Admin\AppData\Local\Temp\Solara Bootstrapper.V210.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
256KB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB