General
- Target Paste Land Free.exe
- Size 227KB
- Sample260914-tlv6nsbe97
- SHA256 d7a66ab342e2a5ee06e0f9dc4c1468268c5b8886930e88f8f2db37afdd260f06
- MD5 c1c4e5330296a20a1aa904fb18439ba3
- SHA1 16462df80c8ead50de016c0de36a4218b81a5bed
- SHA512 2dac22ff93edb993bd5fc2185e528cf4744f2ef17eb51aa7a57a6d9df1350e495ac925376ac9e17c21ed073a711ccddfa92a94e66314b85fedbaad74fe407ccc
- SSDEEP 6144:+loZM+rIkd8g+EtXHkv/iD4HluhOsTPkPFQu//OCgb8e1msi:ooZtL+EP8HluhOsTPkPFQu//O/2
- TLSH T1DD346B5933B8CF17E25F8BBED5B1548F87B1F103E90AF78E0C8895E82411B42E949A57
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Paste Land Free.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
umbral
Version
-
v1.3
C2
-
https://discord.com/api/webhooks/1545905402720419980/uxv--l0ow__ws--DAl2Ot1sa_dmOLoTwOmfgnoiEq4dVpG1YjTfC4VFnYBUZBHEiQJae
Targets
-
- Target Paste Land Free.exe
- Size 227KB
- SHA256 d7a66ab342e2a5ee06e0f9dc4c1468268c5b8886930e88f8f2db37afdd260f06
- MD5 c1c4e5330296a20a1aa904fb18439ba3
- SHA1 16462df80c8ead50de016c0de36a4218b81a5bed
- SHA512 2dac22ff93edb993bd5fc2185e528cf4744f2ef17eb51aa7a57a6d9df1350e495ac925376ac9e17c21ed073a711ccddfa92a94e66314b85fedbaad74fe407ccc
- SSDEEP 6144:+loZM+rIkd8g+EtXHkv/iD4HluhOsTPkPFQu//OCgb8e1msi:ooZtL+EP8HluhOsTPkPFQu//O/2
- TLSH T1DD346B5933B8CF17E25F8BBED5B1548F87B1F103E90AF78E0C8895E82411B42E949A57
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Umbral payload
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.