Overview

overview

10

Static

static

10

Umbral.payload.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    102s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250410-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250410-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/04/2025, 22:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Umbral.payload.exe

  • Size

    251KB

  • MD5

    ef87753af737c85eeabce72fde0da5aa

  • SHA1

    f0cb6e32cc64a387327be0ac866b982533d5379e

  • SHA256

    e7a1844712215b50f6c0f6dcf08c0170a32ed31c6973f133cbb24e3daaaae909

  • SHA512

    c3451ade161351ec4199f741003c309697fd70210324c49dae5070cc286677c7805ceb81dae486f05ea49ca5b5dd8fee75626250d49b467c2b7218048609c580

  • SSDEEP

    6144:gaGu0riMfnHBTD7nEW4uDMgPHLZtIq4aP+Z8e9iLD:gaGuOpfnHBTDL4UN6Moi

Score
10/10
umbralstealer

Malware Config

Signatures

  • Detect Umbral payload 1 IoCs
  • Umbral

    Umbral stealer is an opensource moduler stealer written in C#.

    stealerumbral
  • Umbral family
    umbral

Processes

  • C:\Users\Admin\AppData\Local\Temp\Umbral.payload.exe
    "C:\Users\Admin\AppData\Local\Temp\Umbral.payload.exe"
    1⤵
      PID:3288

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3288-0-0x00007FFC13903000-0x00007FFC13905000-memory.dmp

      Filesize

      8KB

      Download

    • memory/3288-1-0x000002C699BF0000-0x000002C699C34000-memory.dmp

      Filesize

      272KB

      Download

    • memory/3288-2-0x00007FFC13900000-0x00007FFC143C1000-memory.dmp

      Filesize

      10.8MB

      Download

    • memory/3288-3-0x00007FFC13900000-0x00007FFC143C1000-memory.dmp

      Filesize

      10.8MB

      Download