General
- Target delta client(кряк).exe
- Size 492KB
- Sample260911-xpbszsbb56
- SHA256 ddef344e0307811b9603673fc85e71822b4c31d2ca8511d406a97722b7682a7c
- MD5 5333dec5b566cd8990db95f892434db7
- SHA1 f977a7dde9eb6bfd64816f27ad3a511d79a94af6
- SHA512 e536dbd55b209310ca6b6f3dfec8174671b3b999bd25148b63e619623808a50dacdaaa610874d2b0df5e7d380d7b160166bde59316d84fe31ad559346483f3ea
- SSDEEP 6144:AloZM+rIkd8g+EtXHkv/iD4qoXI6YXzQep8aLLyZVb8e1mNliQcUC:uoZtL+EP8qoXI6YXzQep8aLLyjOsQi
- TLSH T158B4714E323B8A4AC1196ABD9055FF7E47645BE4BC27C3046CA1BC83F942F17991B8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
delta client(кряк).exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
umbral
Version
-
v1.3
C2
-
https://discord.com/api/webhooks/1413173361995022397/DQOVA2CyuNWdjv8cL1gpZ3JQuXBB8Pdr2r11B3lHJtmkswujRSAM_-BxEqDZItGUTp3g
Targets
-
- Target delta client(кряк).exe
- Size 492KB
- SHA256 ddef344e0307811b9603673fc85e71822b4c31d2ca8511d406a97722b7682a7c
- MD5 5333dec5b566cd8990db95f892434db7
- SHA1 f977a7dde9eb6bfd64816f27ad3a511d79a94af6
- SHA512 e536dbd55b209310ca6b6f3dfec8174671b3b999bd25148b63e619623808a50dacdaaa610874d2b0df5e7d380d7b160166bde59316d84fe31ad559346483f3ea
- SSDEEP 6144:AloZM+rIkd8g+EtXHkv/iD4qoXI6YXzQep8aLLyZVb8e1mNliQcUC:uoZtL+EP8qoXI6YXzQep8aLLyjOsQi
- TLSH T158B4714E323B8A4AC1196ABD9055FF7E47645BE4BC27C3046CA1BC83F942F17991B8C6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Umbral payload
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.