Resubmissions

14/09/2026, 13:02

260914-p9xbesywgy10

14/09/2026, 12:54

260914-p49pkacr3w10

General

  • Target
    Blox hackl.rar
  • Size 77KB
  • Sample260914-p9xbesywgy
  • SHA256 5e8d0dd5f0a1b43f9853b328cd84420bf2e30583326f1ead3f7e20682c847477
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • umbral

Version
  • v1.3

C2
  • https://discord.com/api/webhooks/1548734521741025330/wZ_JtGM9D2P-Gt6D1Wd2XSwYJoMJJ6hxl6ro9quiJycYYvM3Q_eQv_ZDBj0TYBEanUry

Targets

    • Target
      Blox hackl.rar
    • Size 77KB
    • SHA256 5e8d0dd5f0a1b43f9853b328cd84420bf2e30583326f1ead3f7e20682c847477
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Umbral payload

    • Family: Umbral

      Umbral stealer is an open-source modular stealer written in C#.

    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks