umbral | 41755d1326d7ab8d9226c33922215a7b6038105a4357472929c331ab1df830ae

Sharing

Copy URL Twitter E-mail

General

Target
Kernel RAT.rar
Size 27.3MB
Sample260827-ktmptssbnd
SHA256 41755d1326d7ab8d9226c33922215a7b6038105a4357472929c331ab1df830ae
MD5 0d07b2ecf7fd14b690add52b8cd5abeb
SHA1 1997075728a68ff0e3af7444aa7f6cd9c9bf6a16
SHA512 13c6a5b66e2fca5b12182f8007d7a10f889c5cc2a79803353800d483a357ba295aa7a90a8851313536fc750add78563690272efa827e8af742ea548af7251cf3
SSDEEP 786432:m3hlCEFgMpUWHdTBT8QxSDZ4hKZH4a5Pvm:m3hlxFgMpUWHdGkSqYZHs
TLSH
T1D9573314ECA046AE3CD0E8C401C6E7DE9FB991B2C46714962F6268CC7F7D607E3D169A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

umbral

Version

v1.0

https://discord.com/api/webhooks/1541963781620367462/kkidFTrC55cfmZIGlwnzoZSaQc2D8NECaB1wMB7TSVb0h6_BYfs72Qz1CQluoj3q5v5E

Targets

- Target
  Kernel RAT/Plugins/FileZilla.dll
- Size 5KB
- SHA256 d5792dda7add7693bb69b4249a2b7e0290d0eaf1ff0fb3c37756472fc131c756
- MD5 0240f9239bd1b0c6760693f8f4d5c411
- SHA1 f6dcb2593938a0197083d1c33639a13424923fea
- SHA512 2c5e1941ba6be118845b879a33b2336a3ba95fc4b04834efa84991cc2c541165ca4b752dff9157bd1a7499d6178af2ab8f7aaadf679d3c6ac85f5fc750e7dd89
- SSDEEP 48:6gNaQUyYIXFNvi9pTKSC8SKZhmJSvAwYNMQMQDoB6Nu707pI5s6jWxhi4EXtnSlG:HUy1vaZSKZhmJSvvwZDo4i07XmW3tTA
- TLSH
  T18CC1A50573E88736DEFB8F31ACB651401277F6499A26D7AD1CC8B1D93C367244A31E91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Kernel RAT/Plugins/HVNC.dll
- Size 53KB
- SHA256 35780226b4880e6a5eb8384389bb964cbeb9d5805da8930bfd60140250dc8310
- MD5 49a0f10008f669a165c5108032b28aa5
- SHA1 aed970e703195930ecc1b58ded3e8a24db5b79da
- SHA512 29dcd418988f4d89f8b415eed4450f246273315d836d49afe41bc693503e159f962074345b751b43d2285f3eba7c6a2fd3cf977098a21120acf3663aad5e78b3
- SSDEEP 1536:gTWLsCnSIYDUTFm8Lq8rYYtGvAcRsAWYS:7sKFDu80YQv3Kb/
- TLSH
  T14033E13D03D8517ACCAD18B259B368A243F0CF6549D7DF3F10E895E66CA72821D22B79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Kernel RAT/Plugins/Info.dll
- Size 18KB
- SHA256 01c3c5b20fe9ef6b36c8c1a2309701c261a6e79795763dd3605c4d35de7f3a82
- MD5 f4a1183c8c48c5793897982d70c96592
- SHA1 9867812f100dd4a3733bf720fced6ae8b02a0069
- SHA512 7432948f95985eafcf20baafa7032dd7523e529d7d277c8a6e2490c63f590ab8cd4cf90ba877af1a24d74117332929e993dff7648910e0db97c689a3acb98bd6
- SSDEEP 192:O7l9vOGnAMvnvHvZvfX+czvhvvWDxmvWLsdGObl/ev18qb4rIW1CNN69TdU6fb8p:O9A4Xl0DxmvWjclyR4INNid24pibd
- TLSH
  T11F820810B7E41678D6FE1FB64872915006B7F607CE27DE2F5DD8506A4A73388CE90BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Kernel RAT/Plugins/Install.dll
- Size 10KB
- SHA256 57850762773eba7b931c4332129fbbb0f70723ce95ad65394167bf64118eb71a
- MD5 03b3e454ba6d8dcf9ce71396b1f33189
- SHA1 b2ccf6d5c3c01485636aa3b7f3b8437057fc734a
- SHA512 d7d3883ef41b54a3bbfd4f23c97704d5cb21d9aa655aeaf9d0230ed46bef5660278df261607c114258dc9fa635d272c1938246dd10f3066e3514a915b2eaafb5
- SSDEEP 192:FJklM7qtTCjqZIyn2a8Z8GKGOiba41hbBIW1UM/uUua9nxDTLWM:FJsM0TCWZIyDW8G3XbxhbYM/99nxCM
- TLSH
  T18A220B11ABD08275C87E0B769C6356014772EA07CD33FB3F99D8A1195C6326587B1AB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Kernel RAT/Plugins/InternetExplorer.dll
- Size 11KB
- SHA256 ed53a432f2b41b02d2ec537e2525a5777f344e76b69f4f960d58935ffcea64a3
- MD5 4c4bd6d79ab3dc5f410e8872a07da8f2
- SHA1 75526702c1240c39705f237eebb05002479a00d1
- SHA512 ab5156e92d9a0ff5dbfe42f23c9447bed982152b5406b87f7a3e4203a3e9ee7935af52b73071bbf9b192416b6df451dc8b70536eef4e0ca0c3f16b4801e29985
- SSDEEP 192:GR20Qi1MkDqmTOd9pSCjseiNfzQE16JA+Bn1PmxwTjfUp3:GR12eqmTOpjseiN/16JdBCqMV
- TLSH
  T1E732C609A7E88225E1BF877A9EF343261234F922F932CB1F09E559091E73F514295F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Kernel RAT/Plugins/Keylogger.dll
- Size 12KB
- SHA256 32726f49ccc890ebc79c9c67776fc21e50f3a893ebb688c01b48b7e2f3355712
- MD5 8c733decb0af2791ee341f67af5c232f
- SHA1 2c0a890ae30e8fb3e721c332b6547447ee31017c
- SHA512 470c8ba4392bad8cc32529d90f042eb3f6711c5593b827ccb707d994bfe357d02223dea2c3bc05296df492ae76a753f9197efdc1e8ac90929390f14e8028c56c
- SSDEEP 192:mF4XvgURnvMyEUUCkbf3HW7hf55GObFLHF1Bw6x6IW1m6Vh6p7RYioNcHnxML250:mFeI45kbfGl+uLzW6cVh6xRg4550
- TLSH
  T101422865A7D4827ED8BD0AB20C6393541772E3018F23FF6E0DD9B0064D776A887A197B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Kernel RAT/Plugins/Maps.dll
- Size 15KB
- SHA256 e569c4cd975b944c9364d6764a42f8ea774c57fe7a8c772f5206953fb046155b
- MD5 0616b13386e66dd5d28629e862cd597b
- SHA1 6465a7190dd037ad4b4f9fc12586f03b4505cf3f
- SHA512 5b0a838358b8c8e28041f51d830abaa1d1773df4b9fb4bf508e2a3fb5aae39edc5abff9a395992c2916a8a612b2edae1dd301dc9deb0e85763998edb7c32aa14
- SSDEEP 192:d4/n3oEIh6IkFJ1usnxid/sWeqVXnXoFhN56gVte31HCKM6IW14X/b84Im3t2mLS:sngcIeiHwPRteFiKsX/b9tQo2
- TLSH
  T194621B16A3E4C272D6FE0FB35C72A24407B5EA05CD07FF2D65DC506A4A67B92CE60722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Kernel RAT/Plugins/Memory.dll
- Size 8KB
- SHA256 5424ee284b8113046d630170d6631d1c46a930776dfbabcbb725bf604906ce00
- MD5 e0a69f11f6f84e145ca0003385e766a1
- SHA1 2768d63f8d4799d6872bf536a57510c55511beae
- SHA512 9ee6694749da7d2192dc1d6e878d67a16db55e562fc6126ea3df8d263393c1f766e28c1431f8dc9e4039bc84699239155a1bd3ecab017607c1b0db808415753d
- SSDEEP 192:Ep14DC2HwQG8A1OQGOz714uOIW1fn/kK+QMLun2:EpuC2Hwv444uen/kK+Qn2
- TLSH
  T1F902D4214BD48375D9BF0E729CA286110775E600DEA7EF3E8DC0A1274CA36958FA3A35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Kernel RAT/Plugins/Microphone.dll
- Size 539KB
- SHA256 20c743c08e2d639dac6797bd516cc414340efdbcf6e221ca931c88f9c6af7531
- MD5 2c5219443503a4e57fad632a54704da9
- SHA1 ded7040567527ae13b72ba27ecde100076924964
- SHA512 ea6c7677ae9fcc28231c8700916938dfb98bb398fdc1f1cdf33f1b57c5128cfc54841bb4805107e6b7106c4164af5774d5b0d75560bbeb9447cc69a7289c4b64
- SSDEEP 12288:lcHij8LgXvwMZEvBgbgBqGvxDhnP1Mhu:aHipXvF2vKbgB7vxpG
- TLSH
  T1D1C45D11BBD45527E1AF3372B0E20F2E6BB4E48AB326EB8F045087E85E937455C41B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Kernel RAT/Plugins/NetInstall.dll
- Size 9KB
- SHA256 c37dcb20b0e446d3b38050cc8516a7209817c5b3316b6caa4d54f358eb395c69
- MD5 125b7e01a3303a35b0e2d2f670b579a0
- SHA1 8304949ba27b8aea4eb46c47249ab9e4a3e92e24
- SHA512 235a34bf5e1929ccc357fe2cfe04c1807327c33b2d84925ce4d05a64ee2d6035274ffb04b46d02fed1c9959d070bc43561ebe245cc25cd8275d08730776b0881
- SSDEEP 192:FZEH4AlvcsVPBGOUVigysxeIW1PnQ9u0fATLOzSY:FZRAlHOlPysxAnQ9u0fTzSY
- TLSH
  T170120A2897D04335D9BE1A726C635241067AEE00CD27EBBF49D8B12B4DB32158BA2B35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Kernel RAT/Plugins/Ngrok-Disk.dll
- Size 7.0MB
- SHA256 8161d4b6e29df6e30067d1aee90c73e11b0b7f1ecc659f26ae0547b2828ad2d9
- MD5 406e3d652a07191675cfa3b80e3a4fee
- SHA1 fffdc96aa086895be98082bc837ce6d396f97d7e
- SHA512 34d7f88628a73abd616e2472c5a4880bdfa3a5ec413bacc70cddb06b401c5c2bb054fdb4a678290f66aa187d2b5b8e6dcdec813e168847986a56ce31e21aa0a3
- SSDEEP 196608:jCsxED7kwTV6B/nCR7+AA3e5MryK5Rj1Bpw7Vdjz8wEO+Dl:jTED7/VEqt/A3TryARj1BpwLktl
- TLSH
  T16D7633286BD49267F7EF57F1CD92014A0BF46027B29AE7CE2DDA48FE1DC23049921197
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Kernel RAT/Plugins/Pastime.dll
- Size 17KB
- SHA256 7369af008b7198d30d059b4a16da8161f0c4bc7dd11536e4c5ec8d8a39d5275f
- MD5 40200a4aee55a0764f3b38140e887383
- SHA1 0cf1fc8fc87e6be4cd1a63bd3fdde81ac6b7d267
- SHA512 567bf11019e3cf864f030ebb65d0226df1f108ad774fe3f948d9ed8b286e8838b5a9f2bd01a99d135528ceca545f498e046230779a05ece6b221124e94dfc6b2
- SSDEEP 384:g5mSVHqDK8mm265Q1yMFUeS+Us1jhtIvOia/mT+//YjVJsA8/VHMIU:bSVHqDK8WyUhS+LVYFy/weA8/VHw
- TLSH
  T115821A156FE58371CDBD1DF20CB3A31903B5E2059E23FF1E56D8605ABD73A818610B99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Kernel RAT/Plugins/PreventSleep.dll
- Size 8KB
- SHA256 bb73a0150fb0583f82a59ca9eb7cb6cc87553003702837c01473a846cfc66743
- MD5 25292baa60e00faecb650c3aa2fc86b5
- SHA1 b6dd1c1bac5471b9b5e371728cc8f24f2a0da97f
- SHA512 b604f122ca14b97f5727994a832a9b8dbc6f6faa26d1a3d9ac937103f66bb9fb4eed451ce3a231c138eb2fe526fe1926308643d5a5a3565f353af66e8dd2b74f
- SSDEEP 192:NbA4MnX0GOwav19TvIW1Pn/sp4jTH/LuA:NFyX1ot9TJn/sp4jeA
- TLSH
  T11202E93193D4C276D86A0BF61CA3A2510779E600CA63EB6F59D4F0165CF31944BF2A75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Kernel RAT/Plugins/ProduKey.dll
- Size 98KB
- SHA256 15010f1b02c583735b038a3a84816472a2cd247263942921750a2e7639f0ccca
- MD5 920fa0170cde818fd27b63f2df463558
- SHA1 54ad4d12d05b030da89cf349aa52484d5aaac3ce
- SHA512 1f3318372832083f9ec343a6b72b867cc87ee9f05d629f0d9c9171497b49181083d50b629144b3b56f9c71b900dd9e5d34459d5786b29abc566b01774578efb3
- SSDEEP 1536:ny9+7bgISAwsbzcvesvH29p9coCgSeX06hfKRXso2G9eUJxDbi/:nyI7b/SQ3cmsCXcovdX1TG9eU7o
- TLSH
  T186A37B437BE04471D9E60A702AB69F318EF1BC215539CA1FA758A98F6CF1380CE2535B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Kernel RAT/Plugins/Programs.dll
- Size 9KB
- SHA256 c5218a0a992d243dc4b65b957107f1fa86388f350778e5598a5cc72cc2c4a252
- MD5 862eb1121320649071b3bf0b1fa83154
- SHA1 2f2a21bfb7d28839eebb6e487da9e0a8a7469dbf
- SHA512 162e06b9d7be082cbf37619ca71e912752bee3476810e20547da1ae7f25dbeeea2e1c2ff659dcc4c252fd632dd705f2c677c828c7bf1e8c1cbb8b21935c11ea8
- SSDEEP 192:OFEF1iICi952GPdbRGOEg1WTkIW1Pn/S+mkVRzMLWcb:OFE6ICO2Mx8mWTun/S+hVR3cb
- TLSH
  T12C12E72657E8C271D57B0A32582256400A39EA048D2BEF6F25CDF11F48B77598BF2B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Kernel RAT/Plugins/Ransomware.dll
- Size 19KB
- SHA256 3474d551ff6d6b213d3cd3514530826dcc69539af51ff3cdaeafbf5eebe86c10
- MD5 fd08582b27385aa79953958a8c9a24cc
- SHA1 7d6668df5d8c63d278ff07815196c7e5b560ffea
- SHA512 0e5ad6b78bb4afae732232bc39ad1da521aa340094a6a859533ba5980c908317ee33498c37425f1c81542a2b8c58d208b8e06ae417994f57d67ff6b5d550202f
- SSDEEP 384:22Ke2Etr8SLzINyKU9kbbxXfB+ZMmoI+sHT4k7MoeLZtHeh:22eECS3INzIk3xXP879ws
- TLSH
  T15092072E63E4E134DCFF09F360B392500371CD366821BA297DCDF06A1FB21994296D66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32