General
- Target Grabber.exe
- Size 233KB
- Sample261007-x5srfady21
- SHA256 14f51104e5d051531a6595a252534efc706dc77269d1f1cec686863f9d3ca115
- MD5 267bdbb28941ce1c474049964d43dcdc
- SHA1 4ee9a8042188754da665a0a3035c73c26f91ccf1
- SHA512 0c9a09701a4e78df7d5a429a035d591eb5462633aadd12ee2335aa4ef6e05d2c6a68f278790f3352f4917da707baa2eb0cdb14c9b5396c7791f32f3bdabf63e8
- SSDEEP 6144:6DpjcgHgo3CSGwXDyoDhyiDcNdQGIxFYX+x6IE8e3OpH8:ajcgHSSfX2JbOq
- TLSH T177347D2523B8CB23F25F9FBE95B0055FCB71A207E90BF78E1C88A5E92416741E809D57
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Grabber.exe
Resource
win10v2004-20260911-en
7 signatures
300 seconds
Malware Config
Targets
-
- Target Grabber.exe
- Size 233KB
- SHA256 14f51104e5d051531a6595a252534efc706dc77269d1f1cec686863f9d3ca115
- MD5 267bdbb28941ce1c474049964d43dcdc
- SHA1 4ee9a8042188754da665a0a3035c73c26f91ccf1
- SHA512 0c9a09701a4e78df7d5a429a035d591eb5462633aadd12ee2335aa4ef6e05d2c6a68f278790f3352f4917da707baa2eb0cdb14c9b5396c7791f32f3bdabf63e8
- SSDEEP 6144:6DpjcgHgo3CSGwXDyoDhyiDcNdQGIxFYX+x6IE8e3OpH8:ajcgHSSfX2JbOq
- TLSH T177347D2523B8CB23F25F9FBE95B0055FCB71A207E90BF78E1C88A5E92416741E809D57
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Umbral payload
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.