Extracted

• • Target

    Umbral.exe

  • Size

    230KB

  • MD5

    cd32fdd05be451dcebaa04ed226b417d

  • SHA1

    2ee53c0439df3d1d490df3ae4ae392d1b3bdde4f

  • SHA256

    f255a381ef85b1da243ce96a36362bf08fe313ff0666e58e40430bbbd365e3f3

  • SHA512

    b76af4ff2da8a31dda4b8d32b5eec349862f1b1c75d8806f4dbbbe46e7de899162cd5f79d857766fb934b8ad56f1e9b6e836cba78d1e9f0374d0fc97568e65e4

  • SSDEEP

    6144:1loZM+rIkd8g+EtXHkv/iD4IbGlW0b3cwNImHHm4ib8e1mbi:XoZtL+EP8IbGlW0b3cwNImHHm/R

  Score

  10^/10

  umbralstealer

  • Detect Umbral payload

  • Umbral

    Umbral stealer is an opensource moduler stealer written in C#.

    stealerumbral

  • Umbral family

    umbral

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1