General
-
Target
Umbral.Stealer.zip
-
Size
3.3MB
-
Sample
250218-3sjwnaskcs
-
MD5
ce29928558a79691d300c933ad31328a
-
SHA1
09ca25814382cb97832f3781019d70804e2f92e0
-
SHA256
6b049b1fe08fa1b6d2c89670839bd8001ce9ee3262a0ebe757ec47595d424a86
-
SHA512
e64a7415d43d1dcc13f3250940dc2dae377fffff537757c98ab2f7751848a5e5f3f374cb1bbf3fce7b69409362e01df659471143b262b4078c63637dec80eef4
-
SSDEEP
98304:XINn7mVoLvbDU48xzliDSjtYV2jg0tsGTplmOhl88uc:mjLvvD8BcSjtAB0zplNl8g
Behavioral task
behavioral1
Sample
Umbral.builder.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Umbral.builder.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral3
Sample
gg.txt
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
gg.txt
Resource
win10v2004-20250217-en
Malware Config
Targets
-
-
Target
Umbral.builder.exe
-
Size
114KB
-
MD5
d91fb6867df7e4303d98b5e90faae73c
-
SHA1
496f53ad8cd9381f1c1b577a73e978081002c1db
-
SHA256
bb19b002df31e1196b4e6530cf54c449e9cf1383d3adc5334a0442fa96b36344
-
SHA512
5dbcfe9bf567c6f1e18027950726af1835ab8b363ba8b040fd379b4cfe94b0894bc969b3c04fa4f1964b441a7b894bd4d37f3aabe3ea31396687a6ca093cfdc9
-
SSDEEP
3072:aumr2q8XTs/8wEQuKqAFCq8FBJGgMMlpVFPo6QoJ7j:aumr2q8XTs/8wEQJhCqbsVehy7
Score7/10-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
-
-
Target
gg.txt
-
Size
116B
-
MD5
845448980d89a7f5fa875d45ddc0e831
-
SHA1
e864cede12e5c975abf1171116998c6d55bbb487
-
SHA256
ea1f71e4a749f95c74466dd5c6e67538f1b1cff20216728f98d976a847187be0
-
SHA512
2371760d6972cc37c538636a6e3fa69302995972f3b6c9c7026828d031870a4b659ed68f2185c370cb4c63fd8af8ac296cfd8596d4f9ca1756270193cdffdd3b
Score1/10 -