General

  • Target
    Mando x cheat (3).rar
  • Size 78KB
  • Sample260826-x2v3dsvekd
  • SHA256 8d46fefc57af155228cc984c0371b8ef4d36462bbc2d4cc9f4d3b00988049b30
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • umbral

Version
  • v1.3

C2
  • https://discord.com/api/webhooks/1537161722937213129/ShTaq4MH_sB9ZUUb00hzO_20oq8qACTxpajM60QyupxFm_KqxHH7BVhF220Wv74PYSeb

Targets

    • Target
      Mando x cheat (3).rar
    • Size 78KB
    • SHA256 8d46fefc57af155228cc984c0371b8ef4d36462bbc2d4cc9f4d3b00988049b30
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Umbral payload

    • Family: Umbral

      Umbral stealer is an open-source modular stealer written in C#.

    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks