General
- Target https://release-assets.githubusercontent.com/github-production-release-asset/618254832/4721f12b-f749-4045-aa8f-dce5d8d57c21?sp=r&sv=2018-11-09&sr=b&spr=https&se=2026-06-25T16%3A57%3A26Z&rscd=attachment%3B+filename%3DUmbral.Stealer.zip&rsct=application%2Foctet-stream&skoid=96c2d410-5711-43a1-aedd-ab1947aa7ab0&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skt=2026-06-25T15%3A56%3A32Z&ske=2026-06-25T16%3A57%3A26Z&sks=b&skv=2018-11-09&sig=3k5%2F2GH65sdPybuINaAceUUpYFtFW5qNV86p6mDRpzk%3D&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmVsZWFzZS1hc3NldHMuZ2l0aHVidXNlcmNvbnRlbnQuY29tIiwia2V5Ijoia2V5MSIsImV4cCI6MTc4MjQwMzU5MywibmJmIjoxNzgyNDAzMjkzLCJwYXRoIjoicmVsZWFzZWFzc2V0cHJvZHVjdGlvbi5ibG9iLmNvcmUud2luZG93cy5uZXQifQ.UoLzayyFBia_No-STCtzgylbRCgFxhRqDZ7SC5cCsCg&response-content-disposition=attachment%3B%20filename%3DUmbral.Stealer.zip&response-content-type=application%2Foctet-stream
- Sample260625-tlh64sc19w
Score
7/10
Malware Config
Targets
-
- Target https://release-assets.githubusercontent.com/github-production-release-asset/618254832/4721f12b-f749-4045-aa8f-dce5d8d57c21?sp=r&sv=2018-11-09&sr=b&spr=https&se=2026-06-25T16%3A57%3A26Z&rscd=attachment%3B+filename%3DUmbral.Stealer.zip&rsct=application%2Foctet-stream&skoid=96c2d410-5711-43a1-aedd-ab1947aa7ab0&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skt=2026-06-25T15%3A56%3A32Z&ske=2026-06-25T16%3A57%3A26Z&sks=b&skv=2018-11-09&sig=3k5%2F2GH65sdPybuINaAceUUpYFtFW5qNV86p6mDRpzk%3D&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmVsZWFzZS1hc3NldHMuZ2l0aHVidXNlcmNvbnRlbnQuY29tIiwia2V5Ijoia2V5MSIsImV4cCI6MTc4MjQwMzU5MywibmJmIjoxNzgyNDAzMjkzLCJwYXRoIjoicmVsZWFzZWFzc2V0cHJvZHVjdGlvbi5ibG9iLmNvcmUud2luZG93cy5uZXQifQ.UoLzayyFBia_No-STCtzgylbRCgFxhRqDZ7SC5cCsCg&response-content-disposition=attachment%3B%20filename%3DUmbral.Stealer.zip&response-content-type=application%2Foctet-stream
Score7/10Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.