General
- Target Grabber.exe
- Size 233KB
- Sample260825-vcvdfssxey
- SHA256 08abff67470f9caca2a8497d7d528234d29524f6b1edcabf52f37c0e074eb48a
- MD5 4c0932e41ca7c36453c38e302566bb3a
- SHA1 8e44410023e3e4674a52697c72a8b86d66e407af
- SHA512 be86de6a2cad0be2b8d93ede17360eef4a8a84b95b351fcf99fa195229b77cafa7930679e6843636322770d09b2be614a06a52d7ec05ab7bfae1b48d5b68d429
- SSDEEP 6144:6DGjcgHgo3CSGwXDyoDhyiDcNdQGIxFYX+x6IE8e3Opx8:NjcgHSSfX2JbOc
- TLSH T198347D2523B8CB23F25F9FBE95B0055FCB71A207E90BF78E1C88A5E92416741E809D57
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Grabber.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Grabber.exe
- Size 233KB
- SHA256 08abff67470f9caca2a8497d7d528234d29524f6b1edcabf52f37c0e074eb48a
- MD5 4c0932e41ca7c36453c38e302566bb3a
- SHA1 8e44410023e3e4674a52697c72a8b86d66e407af
- SHA512 be86de6a2cad0be2b8d93ede17360eef4a8a84b95b351fcf99fa195229b77cafa7930679e6843636322770d09b2be614a06a52d7ec05ab7bfae1b48d5b68d429
- SSDEEP 6144:6DGjcgHgo3CSGwXDyoDhyiDcNdQGIxFYX+x6IE8e3Opx8:NjcgHSSfX2JbOc
- TLSH T198347D2523B8CB23F25F9FBE95B0055FCB71A207E90BF78E1C88A5E92416741E809D57
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Umbral payload
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.