General
- Target https://github.com/habibmessimessi1-lgtm/V/releases/download/f/FFf.bat
- Sample260707-jtdaqaat2j
Score
10/10
Malware Config
Targets
-
- Target https://github.com/habibmessimessi1-lgtm/V/releases/download/f/FFf.bat
Score10/10-
Detects Umbral payload
-
Family: Umbral
Umbral stealer is an open-source modular stealer written in C#.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Disables one or more Microsoft Defender components
Uses the Powershell Set-MpPreference cmdlet to disable one or more Microsoft Defender components.
-
Disables automatic submission of suspicious files to Microsoft by Windows Defender
Uses the Powershell Set-MpPreference cmdlet to prevent Windows Defender from automatically sending files to Microsoft for analysis.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.