Resubmissions

18-02-2025 23:46

250218-3sjwnaskcs 10

18-02-2025 23:43

250218-3qz5vssjhy 10

General

  • Target

    Umbral.Stealer.zip

  • Size

    3.3MB

  • Sample

    250218-3sjwnaskcs

  • MD5

    ce29928558a79691d300c933ad31328a

  • SHA1

    09ca25814382cb97832f3781019d70804e2f92e0

  • SHA256

    6b049b1fe08fa1b6d2c89670839bd8001ce9ee3262a0ebe757ec47595d424a86

  • SHA512

    e64a7415d43d1dcc13f3250940dc2dae377fffff537757c98ab2f7751848a5e5f3f374cb1bbf3fce7b69409362e01df659471143b262b4078c63637dec80eef4

  • SSDEEP

    98304:XINn7mVoLvbDU48xzliDSjtYV2jg0tsGTplmOhl88uc:mjLvvD8BcSjtAB0zplNl8g

Score
10/10

Malware Config

Targets

    • Target

      Umbral.builder.exe

    • Size

      114KB

    • MD5

      d91fb6867df7e4303d98b5e90faae73c

    • SHA1

      496f53ad8cd9381f1c1b577a73e978081002c1db

    • SHA256

      bb19b002df31e1196b4e6530cf54c449e9cf1383d3adc5334a0442fa96b36344

    • SHA512

      5dbcfe9bf567c6f1e18027950726af1835ab8b363ba8b040fd379b4cfe94b0894bc969b3c04fa4f1964b441a7b894bd4d37f3aabe3ea31396687a6ca093cfdc9

    • SSDEEP

      3072:aumr2q8XTs/8wEQuKqAFCq8FBJGgMMlpVFPo6QoJ7j:aumr2q8XTs/8wEQJhCqbsVehy7

    Score
    7/10
    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    • Target

      gg.txt

    • Size

      116B

    • MD5

      845448980d89a7f5fa875d45ddc0e831

    • SHA1

      e864cede12e5c975abf1171116998c6d55bbb487

    • SHA256

      ea1f71e4a749f95c74466dd5c6e67538f1b1cff20216728f98d976a847187be0

    • SHA512

      2371760d6972cc37c538636a6e3fa69302995972f3b6c9c7026828d031870a4b659ed68f2185c370cb4c63fd8af8ac296cfd8596d4f9ca1756270193cdffdd3b

    Score
    1/10

MITRE ATT&CK Matrix

Tasks