General
- Target Grabber.exe
- Size 233KB
- Sample260720-xetwtab17j
- SHA256 da39a865fa3677ed9a805cbcccf3f7889430b759d17f2732597c0d6f00e52a9b
- MD5 10e4ff3feb58f17dcd952d2787c14ffb
- SHA1 5c74f9f3e87536c224722725a5df04a6366de9a6
- SHA512 6a067d8531b557007af9dcd64903f12cc9aade234ebf14628ffd782ed83ce687cfa0e89ff4ca6ec4b241812b7d30368b2f9d66a16fe364c87e8a8eccbdb3715c
- SSDEEP 6144:6DpjcgHgo3CSGwXDyoDhyiDcNdQGIxFYX+x6IE8e3Opq8:ajcgHSSfX2JbOZ
- TLSH T18D347D2523B8CB23F25F9FBE95B0055FCB71A207E90BF78E1C88A5E92416741E809D57
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Grabber.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Grabber.exe
- Size 233KB
- SHA256 da39a865fa3677ed9a805cbcccf3f7889430b759d17f2732597c0d6f00e52a9b
- MD5 10e4ff3feb58f17dcd952d2787c14ffb
- SHA1 5c74f9f3e87536c224722725a5df04a6366de9a6
- SHA512 6a067d8531b557007af9dcd64903f12cc9aade234ebf14628ffd782ed83ce687cfa0e89ff4ca6ec4b241812b7d30368b2f9d66a16fe364c87e8a8eccbdb3715c
- SSDEEP 6144:6DpjcgHgo3CSGwXDyoDhyiDcNdQGIxFYX+x6IE8e3Opq8:ajcgHSSfX2JbOZ
- TLSH T18D347D2523B8CB23F25F9FBE95B0055FCB71A207E90BF78E1C88A5E92416741E809D57
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Umbral payload
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.