bf8b61c5f383760f71ef9d6bd5ec6a0d08bde14b2cc8ec7960c293df2289226f

Resubmissions

11/10/2026, 16:15

261011-tqbylada737

11/10/2026, 16:15

261011-tqbylaxv2l

11/10/2026, 16:04

261011-th3rcach467

Sharing

Copy URL Twitter E-mail

General

Target
Umbral-Stealer-main.zip
Size 2.9MB
Sample261011-th3rcach46
SHA256 bf8b61c5f383760f71ef9d6bd5ec6a0d08bde14b2cc8ec7960c293df2289226f
MD5 ba9639749e3947b79a5084fda09d357f
SHA1 6c83ce6ab602d257a1dbf0d7449607f1dd68c067
SHA512 3bfb6eabb0a11b8d1fd71d4287cf0abe5f545a9f27f799c713750bc36c124622a0cffc8bb3156f9cf21d563a4f35c8dd960a1802f4db6f58f56bdccfee2ae8d2
SSDEEP 49152:gTkfrozNwoi+9/5r4m/GRF9VBDeqI6Q2GIJVPD5NkMpHs/EC8MsYPp5zNYq4KtBA:GkjozJ9/im8XVBKl6tVJVPjkms/ER+n+
TLSH
T1F2E5332442A0DFC8F0507135398645FAE0987C5428E6DB2D49ED439FEFA794A2DF92EC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

agilenet execution

Malware Config

Targets

- Target
  Umbral-Stealer-main/Umbral.builder/Components/Build/Builder.cs
- Size 9KB
- SHA256 1cf06e955f1cf5857b34c0421f50f28369d1e908bb92d0922e9e59a96757a0f1
- MD5 9a2b1be892d4acd1acb7eb23edca52a8
- SHA1 316694e907775bd49a4b05d6560cfdaefe922acb
- SHA512 fae86c9a95868cc38b13a4f4e14c53527bcfba091cf22b8c624f5939b07668e90d44f1d4f9c578212bb7a4e5c70e14266480bd06c742a50c9877e0191b352e5b
- SSDEEP 192:iDsNRH6g62rESiy6UpyiYv6dfso+IrkiNsh68fXX51ACTqQ4BL:iAHH6XSeUGvFo+cshhfn5It
- TLSH
  T1BD12FD1BA677CD890CA74037EBFB60448B2164979269FC7A7C4DA040CF9478103F6AF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1
- Target
  Umbral-Stealer-main/Umbral.builder/Components/Forms/AssemblyEditorForm.resx
- Size 13KB
- SHA256 bbf16750817505ba21d1c9920296411b18c2a95070c6f549ed340ed74f1a1cb1
- MD5 80e03b51930410560a8b032758c9ab03
- SHA1 4680834751fd8a97a94188e16d117d9e6e10cd77
- SHA512 e15c985b117de197e7b55ccbc9028d01a444e94ada3578c9e332cda878b41efc6e1f20eff4645fe108e21c9be5237e4d5642e3c8c547355e66353a1ebf5e6edf
- SSDEEP 384:Zf+tLPQnLvDOiFQXD7UMawUZgwIokPiQ3KokPiCokPimOokPi4uokPi6okUQ3liN:ZfWMnXOiWU+iQ3yi6imGi4miZQ3lHQ44
- TLSH
  T1835286217296BD1A47936C78E1503B853FE4722B222078457CDF27199F679C1EBE3398
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral2
- Target
  Umbral-Stealer-main/Umbral.builder/Components/Forms/MainForm.cs
- Size 7KB
- SHA256 43b664cdde212570abb8b13708f47b2728cb3b32346ab89d55a224df68a67f61
- MD5 9291c82a222de37e9f4c3436a868919f
- SHA1 7b6dfe9c362b712d48249320a0651fb4c261cbbc
- SHA512 609526fbf408819254be4d62eb9642ce867dc9cef60899da0c56f36c1dc9358de523792ae2e8a2424b1987a05b860661932a06b36d59f74ca2bcb50d64f09962
- SSDEEP 192:ij2Gfwb4Cjf+AgH9g6SwetiKJwefwiOgpSDkbL5XiSC6Jn2n7rtSSCg:ij2+wsLwhckbcrtSE
- TLSH
  T139E143BD525759585193D430EF86AF9FB721480B0366BC303A8D42B98F046685BFCBEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  Umbral-Stealer-main/Umbral.builder/Components/Forms/MainForm.resx
- Size 23KB
- SHA256 fbf5bdc94c026c225ea8851d4ec1de81176d48747d21a6568a98ee2993e5d427
- MD5 2aeafe43f50c1a5ee1b273884e6b3c1e
- SHA1 7ea2ad57d6c4e50ecb9908abf037b69913aa8dc0
- SHA512 81f142cd843b8b6e7ca4db1d204f40058de19cdf9035af75cfa8ba3d4acf4b8616b006056d37327a750c6b965ac578200d6ca40185543c5bee2b170d0f6231bc
- SSDEEP 384:Zf+tLPQnLvDOiFQXD7U3FawvGaw5ZgwSokaXQSDV8okaXQdokaXQhdokaXQUfokX:ZfWMnXOiWaqVXQSDV1XQyXQhyXQU0XQN
- TLSH
  T143B2B936B2979C6967C30CB9A2112EC52FF463172265642478EE3609CF1B6C1BFE3358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral4
- Target
  Umbral-Stealer-main/Umbral.builder/Properties/Resources.Designer.cs
- Size 3KB
- SHA256 a5c8c80a2f1d348c69bcb891e9c7095d2a6addf49f8927668986ddc7a9c7245d
- MD5 311d73df3c182e556c964775da6867b5
- SHA1 12bb39b46560f6a8918d02efaf31bada1d13442e
- SHA512 33bbaf6bc7f8b46bb8f98ac91de81006798358a2c2b2c1e2a03ce7886c4dde66e8ab9e60a10cc8816d8ee00aa776989227e5a968508efa146ae9f7bc825a1870
- TLSH
  T1F271CBBB5F96C5320834D6DB9704F851CB721153C63DD428F8AE43694FB629043BEEAA
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral5
- Target
  Umbral-Stealer-main/Umbral.builder/Properties/Resources.resx
- Size 6KB
- SHA256 998534fc8cae09a06e6eafc41c864f060904bc2f95f85e2c9691ed2de8912ceb
- MD5 c503b2f5c5121b402729796f61a6d380
- SHA1 0705072ddf1d1cec6fc31c305728578960e14e4c
- SHA512 9a56fd9d328fb4cd4e79a4a6537a9d9adba4fa2d5452f0a25f6a5fa673f40ed0186c7fd8076a05770f7acaa9123712c698bde48ccb1d4fc880e75438b409b46a
- SSDEEP 192:KjrbLPD9sLvIzSvKgIqUyahF8FokwClQEokwCl:KjrbLPxsLvASvKgwyahF8FokwClrokwY
- TLSH
  T1C7D14455B1C1DD260BB34C2DE6167984F7A8823B0234AC54B4DC621F9F73886A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral6
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.Licensing.dll
- Size 1.3MB
- SHA256 a9be91cae167702885a5ca74273db779e3e391e2e604cc03779ed403c53ebe43
- MD5 2b2740e0c34a46de31cf9da8a75d77cf
- SHA1 242324f1112e6387cda41686291b6e9a415eeb8c
- SHA512 605eb300b159e6ed2ee872b6ee378eed7dde6541000221fcd94d52057be91cb3c7dd65c7203f05e0718303b157b6fb941498b5e653501f97f0417d459da6bc40
- SSDEEP 24576:ebkurkdR5uuMeiPUf2lHmdpjrcbYdwcqMw5LTvBrq/WGs1xGUfGUCco:a1roD9MeiUDDjrW4bqD5LDBrqWG0GUfX
- TLSH
  T16155F150B3FA6F16E1BEB7F56971120807F0BD979835C30C9EDA01EE1B62B848494B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.1.5.3.dll
- Size 342KB
- SHA256 012d717b4ac00c3686a772757f49c1908e223624e3974314cdb9fc9291073305
- MD5 41c216d27c71a227774e680e95e99f31
- SHA1 0a2a93d4ecbf4bbec2faf110066c6b4472b0dbf5
- SHA512 e355ba11e41b668e4459f709e87c3e212c8986ea894791d9155791ea9d7315372fb51531eb69204ed2ee38e242de7629e4a2f090c05bf9deeea9ea965ffaf651
- SSDEEP 6144:3e5XJsDZGUbIf5kqw23B1Q8g2iYcHIc6uWXMIFidNw:qMZGUbIf5T37Q8ncHNAMhNw
- TLSH
  T1C5742DD15AA5ADE1C7D747BAE7103143D77888A07ADAE70BDB8401FC49A2F9BC84D087
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuButton.dll
- Size 107KB
- SHA256 2a62c78f1f0db2e3258135b50f7885e6734c31c74a8f2f5782f285aa268c2f71
- MD5 21f999e5ac72a16077511d41590822de
- SHA1 d8bb1a8a291f73cdf2b5658b2b65736c87db19dd
- SHA512 e04fe31870f266d772829053a6bb210a9513ff5c8c0f9a3a267ddbe1875125496caa602baf44a4e241ef84d933bd55b79af43d5871ed10c81711adecee78b8e3
- SSDEEP 3072:tgiMibnDED3/7f2ih0xdGzFpzUHgmCFKHUUZP0tTwmnkyY:xDDED3/7f2ih0xdGzFpzUHgmCFKHvF0e
- TLSH
  T15EB3083F61A45E71C34AF73EB008514247B2EE90FD76C736BD9842D92A837A74C1A297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCheckBox.dll
- Size 102KB
- SHA256 390252aeb6fd76a954a03853c3d883e0360dc8b3f2cf8cfed5ba94e4e5a24da4
- MD5 ef11f59a9381df17d7ab94434f79f260
- SHA1 ec11e46a636fe3927fd5fa7c30be65b958853ef0
- SHA512 612b1b0f9204c605ff5e9b91816e674cdaea71fa69f81a5a7f475bf1cc8d5e12687deb1b0118b07b3d7e4764adede0576f8fc799f8155a65a70e5dafff50f73d
- SSDEEP 1536:JiQsfF22IDMxiQ9MOWnce1Cua4JfhwuKeWbZ6YlX52o3tWQFeOvTT:JifF22IoxChnv1CuhW1xCwdeOvX
- TLSH
  T132A31B7F62E59F60D38E633F65B061005770F450BD3AD77EAEC848884D9375A0BCA29A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuCircleProgress.dll
- Size 77KB
- SHA256 d5ed95667aa44a80278b80a90413c0de9d85eeb3ca1fa24a40ae71c3ad88d837
- MD5 bc930a050ca23ea75dbd9deade4189bb
- SHA1 e6878d381ac1c37c331fd01a25b2ec508e1c1a21
- SHA512 20e2bb3661d2817082c2aa01381b5aee8582fea5fc54be486de5b1e48f302a15779ebe5670221774a5a4d031248b342f3c86084de4f023c197cd210857fb3ff3
- SSDEEP 768:A8ioretsy7GQLZvAQFe1zbnprSBaqII0OsWjc1B5Nl4WfWQAz6uJi8B4dgUp2hQf:JixnZYQFe722Wj8l4oL+6uJ/BZ4ZTz
- TLSH
  T1E7733A5670B5CAB1CB1E2B3E238061400BB2FAD2395EEF177E6C879946833FE5195187
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuColorTransition.dll
- Size 38KB
- SHA256 500adece1fba76dfb2fa628de9886a2661ed1a4e58a7717a5fee607206bb1d81
- MD5 539d803013c0b1592d0e17a740d72687
- SHA1 b0ce15e0f096d027b1d1482afa9d93bafd160f7a
- SHA512 77d8ab7a949db41a79371cf2ebd5d67bd4a38dd040de0073c878f50b2a6409fae2dc5db7cbf375fbc1bc571838b0a6d4848bdecc1420d91633b878585c94b9dd
- SSDEEP 768:2SfWaEnnh2U2DaRIx0qVuQ/90iAzNIewCqyU659bTTvtM/3JhQTifZs:cs0qVb/95+6ewCqyZ9bfvk0TWZs
- TLSH
  T10A033AD266901E63C39706F934A093165BB4F5E379B1E35BEC1C80815AD33FA5CE92CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDataGridView.dll
- Size 83KB
- SHA256 9e61bd6dbcc8d5866bf3a139ea12f453ef4ca8bab28c08329cbc5f0bf13950df
- MD5 53765ad5b31fd87986a569bbb79f402c
- SHA1 75c7ec63458c79ded533d1d4175de4117036adae
- SHA512 ea129aab13b09e817be6210bc423bcf4e024c83a5a0340941e7658d4dd0ef6f3b40077527f7d168849ad947650a00d360fa6a5f64c4a8f14dfe72cd4d34469d3
- SSDEEP 1536:YNBBIrOTrgVCuiPwacJigM8H+duT0R0xSJQ9FTiIb8EtTG:YNBoGgsPiJfedkvu/IFtC
- TLSH
  T132832C8672D95F71CA760ABE90F002112BF1E1832A45E31ADEEDF5CA0562FE1D146BC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDatePicker.dll
- Size 50KB
- SHA256 3c1ac3e39665e49327b64887131a53c63379de884b3a6f9a0ab96a36e882ceb7
- MD5 a05882bac172c61b5b1bd3f4a56b4320
- SHA1 9a725973aa498472c253382ff8d766a5d3a41697
- SHA512 a503f5cd0211b123618ecaff83a7930a6b547a1afaad1b93cc5e60bc859e255585a8a94832747422de139f2fe6451b2fcf46b31bac20e12ce60f97983e1af493
- SSDEEP 768:KMzEetGON+bjRFOchYvP0pbwk4LAzn21AXrpKXyvcgq8/i7l5THL8ZFxIZYzUebj:HsONqjRFO2ZxXpHraUNaT0
- TLSH
  T101333BE232AC9E73C39B8B392050E301B678FB527EA2C7566D5C428C16E3BDE11D549D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuDropdown.dll
- Size 50KB
- SHA256 f746eef49caaf23939999a89c86787e6d1f4e4c16f667bcfebcaeacb5276e0c8
- MD5 5bc3c478e3c44caf765c6e998dc621f0
- SHA1 8cd06d3ec991ae3d5c0d935ea03fd7c06d504d53
- SHA512 3990c0a716e2e0619cd969d75666cacf695b6d40a118ead8a810997a594b558250e4a661e303f383f58bc52cac90e84a2049a50a1295f762b2bdbdb8661c33f0
- SSDEEP 768:WxidV98e5TsEQgzWC/Vzv/8vWvLMFZhjd5hQTi7q:Y3ehsEQAWQHgW4Zhx0TN
- TLSH
  T13B331B72B3E01BB7C75BCF3E34504046AA38B622693FD3567C9C126CD6A3BDD0690296
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuFormDock.dll
- Size 102KB
- SHA256 f8052b4641fea785ef643bc06d0e5383555c0845bbe695099bc41ab09a180ef6
- MD5 fff8d46f94011c5bfa4bc1d1fbde3eaa
- SHA1 c5e978eb89e9646423c3b2a1d7d2651cdbee90f0
- SHA512 61af0253c05bd33d43d34799eb74d97ae9e3e700281273895026d690f39e3de97034ee51511284a4b6a4150d31977f7ac6fbf4047aa19825564a15eae8be079a
- SSDEEP 3072:wVypYUOJdOb8UD8m1PxGFXflE2BHjvZKDq6CN:wVypYUSXdbBjvZKDq1N
- TLSH
  T10EA34B3EB1E96EA1C34A377A509183113F7BDB507E72D70B989C40D9AC82BD60C562DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGauge.dll
- Size 74KB
- SHA256 0edc3396eb94c33fca4889c5a379e29aed354469957ee55893f565d8f824cacc
- MD5 161768e00f22118c66a84d22e658b008
- SHA1 7645e52d1aeac19169c8cd1b411200ee808295b8
- SHA512 cfcbc3e642f6f9cf904b993a6112e2304055cd88e9bbe2d818842d4e93a5f71ff6a09f8d36c6a64de8701435cabbddbff765307f8c110dcb5bb14d805aeb3422
- SSDEEP 768:POPW1cKm3/WnwISrek0JCPRjNEp5lW1T31fNEDqz6Zi6EgmaFLGiLjyQXAhQTiQb:PUZewEQRSXlEaDA6w3g7wi3yWLTbb
- TLSH
  T1F6733A3171E92DA1CE4E0F35A140A2022F34A7C3393BDB65ADBD83A647937EB46D5193
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGradientPanel.dll
- Size 60KB
- SHA256 6811dc0f98d2ce9816475207badd010564b7be460f48b8480664f9184824ce5f
- MD5 58be3fb2879bf2614b7854b0e184521a
- SHA1 fbdce08394b1d11a961c0684d5c0013507dff9e5
- SHA512 a5635f09a943e0dd969b648ab7d929ba16d734ebc13f96ebde95d1a5cd91e14ba1b2e105c7414816f3d535bbe2be4ad861a16e25d84c2d12dd025898f3743b0d
- SSDEEP 1536:FpoDvSiiUiiJiiJiiYiKbfbD7v055J6O5v2wunCT6:aSiiUiiJiiJiiYiKbz+bB0Ce
- TLSH
  T112532A62F7D40DE1CF8F053A645092025B38F6F3B85ADB4B7D9C41A68B837E611C935A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuGroupBox.dll
- Size 46KB
- SHA256 637b5cac86e245c53af91e41e6479de42df1b5fa5a524f931e034f5b5ee1f259
- MD5 e86aafa7c25a2f1654cf95657cacc39c
- SHA1 c9ab7d835b24b294309abed83efff4cdf102906b
- SHA512 8b043a2434681773c6e3d8e73fde70fbb666f57a30f5e3514634ccf5c714979fa89769fc54e3e01fba91c5ac916db44054fdd2a65b4a6c35869b695b8696d96a
- SSDEEP 768:jODM3ey49Uo613D9ddld3LTeBNsRfMzIz6FzHGptXZEchQTits:jODM3eySWd3/jRam6FzHG2HT6s
- TLSH
  T16A231C54BFE83F71CF8F4339A5804201EB38A5DA7C52D79BAD4C828917827E6429536F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuImageButton.dll
- Size 155KB
- SHA256 32b8eb2fae4a14e8319448cd173b73a8e63234b3816d6407ef95be204cec226d
- MD5 7d68b8af58c87ee29eca74fe8ef2f093
- SHA1 16e8d2004d2c3a71a8dcb6983b72537079ccfd3b
- SHA512 6c3f90e7596e0a73cc5da77b92b2d4ed248e49aba2c0c299be4400b8841782415820a44bcca1635a224edc90444559ed14de7dc23fbb7133c0bd86fe93ecd236
- SSDEEP 3072:28cu9fbsLqRKynlLWwUGR3BKRqbpqtqzh4E6jt/:zfbsFulLASYqddzcZ/
- TLSH
  T1C8F35C3EF2B5FDB1C38AF23A3824D1004B35DC94FD66E34FB544C26B4A81B5A095A967
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuLabel.dll
- Size 420KB
- SHA256 a505193910f7b8fd6123c00bb437bff3d2a4f28c970e24207d395554765e6ad4
- MD5 73ca0338c9c3b7901d3621b346c76a7a
- SHA1 79d26ee6e1bf0beb2ee0593562592de8ff01935b
- SHA512 53e0b84dffbec8e465955bc91f1207ba56a55543ba3c00c66997b3ee3d4cb904e027915a12f7a9dc79ffef4cde633c9b7543436c4ab97785ca2169bc3d4aeede
- SSDEEP 6144:IMiEH8iZBKX+7haZYjw1MLZRD0fxrmfD4DJL5f:IMNhZjwKLDCVf5f
- TLSH
  T161943A58A1FD38E4E27B07BAB15219C2C7ACD8D37DF5C75E888B64EC3662F49C414262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPages.dll
- Size 95KB
- SHA256 633c77cbd4074c428a593e9c9769926ecfd484b40305062c6c268edb1fac44ff
- MD5 170b18df5b12f1eb01c2de4a03e1a043
- SHA1 2fa3dde71cd17bc2a9fbe8dc05f5e50c94f6cb16
- SHA512 8af0aac446d8efbd0b6cfa58093e21b1201e03057df42d922215237adeebee7d5fc9096d526761424092c2131ae3e0ba9696cf2b51b3aff4f91f0e1902b1b053
- SSDEEP 1536:QbEFvWVvz9NOLQ1p7eCweuT2CWvlcHF/BmEwMDc2xgAPWTUh:bvmZkLQ/wLT2LcHZBiMVxgAPWwh
- TLSH
  T18C932B3AB3656D61CF46733AA131A0015F35F6983C6DD37A8AB488D919D33E70D0E2B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPanel.dll
- Size 42KB
- SHA256 4404f91ebc3aa2b018dc98039edacd02c4578f7c581e27ab902fb7c8a8eb76fe
- MD5 ba5a73023ac466e78f54fa87460dda16
- SHA1 15b7b81172ef13e72e6b55d93f512d3c660f8238
- SHA512 8eb1ff4d2c420fc2d832f8d7d8c05d0e63145bf132c5b0622d8cbc515a89dd735f985e2a0c723fe8d6b95b37cd7c56c70c2e1cae3d183d600e8b83d2d522ad7c
- SSDEEP 768:j87knLt2VL6NhPxCb6yH4EgrtR8pLBsyv29UFsxztf8gVnzFy+KDj/njd3m7Vejb:47knJ2l6Nh5Cb6yH4EgrtR8pLBsyv29u
- TLSH
  T164134DD1B3E85EA1C39A163A3AA05DC14BF0FEC63851D317AD7C81492E907FB44DA297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuPictureBox.dll
- Size 36KB
- SHA256 2cee0aff33f80d8db13831c04687dce28a5f4d8356461553a3f51f077bd9f875
- MD5 9c0c94890f9c941bfa9736adc7b8b535
- SHA1 4f8e79cda2c407c7dd0421554bbe24d6a180dae9
- SHA512 349ce7c0b2c068fa1365773052fc8771b37ac2b23b6ea4d8f546471f2e79ea96f945d23b3a96019cf1e72d63ea424c182a064c0d5b5eafbbd8b3e185e9889722
- SSDEEP 768:vqd07rjIiq27vDr920odL5PzQ8fbstfrWHlpmA37nmH4hQTij:/q27vPI0odLpQS4froUugzTs
- TLSH
  T150F27B6677E1DFB0CF654A3930A2BA05AF70F5839890C777A81C50492BC3BF912D9359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuProgressBar.dll
- Size 76KB
- SHA256 7344febb0946f7555127a8dce09b4df3c430a3805bfd5964c477c36f98303be7
- MD5 e08551ac64936f619d33d53de1baaf60
- SHA1 254ce04897946348e25c45d9e22638bf64fec6ce
- SHA512 17e220a1f3b9eb1017f34a9327cde9b8276d5db0eb10c1ad08c68ac2b1c60873c1f5f8dabb8af382ec4d1b83a767c5435837835ef0c2d341555fe21b8948cf4c
- SSDEEP 768:zm6fVYmVH9VRninLAmjl/AurKv77XXwLsp4Ds5Y2XUTunDD+0bO1KNjh1ekrnDuh:E5QAx7NFpS2Ttm+BXQV0zXVVzXuQTT
- TLSH
  T194733C65F3E55FB1CB8F5339607071005F35A69AB95AC3DAAC8C41A80BE2BF700992D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuRadioButton.dll
- Size 68KB
- SHA256 c0fd5f368332a8a5794325c89d5e66e2ed74db69a0f592c75d6fd6c3518f73d7
- MD5 2ba0461d0e46a3cdb553230be6d9e9d6
- SHA1 316a26cbc90735a276bc914bc492dd0da2cb7cad
- SHA512 d489eaa8299805923a08e33813f82d61c0d4267cff3fd8eed889f2ca6dd34239a1cc188f7a72b10a0ae04a7eea9a9517f659d8767987229262676bdeeaf84a32
- SSDEEP 1536:vZsbjXEa+pNKSq5c9ugzX7BF0Xh9UVqIrK7Of08WqOSySGvieagbORNIjOwOFnJ0:vZ0jl+jKSq5c9ugzX7BF0Xh9UVqIrK7d
- TLSH
  T1BE635B35F5B45EF0CBAA0A352090A102AB38FE83FD56C75A6D9E42C947F33E644C61D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuRating.dll
- Size 49KB
- SHA256 b0a971f43a25842db9b3c72c10bb6abfed0daae90566df7f23253e3bbcbc4ba9
- MD5 7224c8510e42a78c9bb147e9c30a4df4
- SHA1 0a3022798b8006c5d51cbc7c8cfb4528a2d75c3b
- SHA512 c9119462eeb9c62a0ebaee9a05e017a1cf80f1de37bbea9242460fcb24154c7b3a94dc8a7e19d7e9198c349055c22912eff8417d9a2e1713f48b6b97cc26873d
- SSDEEP 768:UVf5PVg0Ts0+azK7+Eqm0Mvv8JgzNp6x/xCRyifQXSfbKNJ9hQTiAT:AVJTs0+azu10MvJNp6IfQX8KbYTnT
- TLSH
  T1FF333AB1B6F77E72C71B863AA98041021B75E643BA7EE713EE6D42494183BDD30D10E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuScrollBar.dll
- Size 178KB
- SHA256 cb989842e3c3d9baf79550f6e826ae20226b24178ab4ad279c76a3b4983294f2
- MD5 5d8b299875c4e5f6ef079bd13a15351a
- SHA1 8f4f33d477ca7d3cea872bc4ebfdaae401c3b6fd
- SHA512 7159a79f748e7e947e9d56c17133e2ffabafc5672cd4c0c89fc854fd520df525530795d30b4170eb427a807479414eabc8364700c697c958c305d005c1d34396
- SSDEEP 3072:dqtazpVUOZj1+8vP24DzyY4L+i5flfvCYPaRUKpmFRycau3:wcQghPZDmY4L+i5f1vCYPaRU2mFRz53
- TLSH
  T127041AA9E0DA5A71C74B4A3BF9C432342338FC907A15D31E99C436E907C2B767A8D15B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSeparator.dll
- Size 37KB
- SHA256 9c2c4d272ce8fa98a6100fa668190e5084f69ee9e75e0075e267fdf1811c5738
- MD5 5a389e93f449d77bb0b685fa40f14a95
- SHA1 94a5848f149a8b4fd8bbf401d43bcdaae1765829
- SHA512 73efd93390eb188272b922b0a95d28fc7b4a0eb0006dcd62210cd2a2b8265ce804cde5415133f6da6aeeffb179eed2e1e2d0368676173df8fe563e805bf8b00a
- SSDEEP 768:N6/wh8zZ1LDNH8FOXAJyr09GvYBqjs1+Hw5ibkt2fIxaTclu3gpSLUdWUU7CGtOe:2DN57CGUFWKGWkq79Tal
- TLSH
  T1C703189076E49FB1CBEB5A7534A0A3018F30F233F9B2D767559D80065A823E50DAF54E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuShadowPanel.dll
- Size 45KB
- SHA256 1858b16074d7f9b73f462e3adcc77309800594fa96f2e0904c810eda4eaf5e86
- MD5 ebaf1a6efa8c7a04d174be7e0df602a7
- SHA1 ce08c80e52b6cf3f62ba82408d8f32ae6bcef0d8
- SHA512 4ffd5dcb59a4a03273c4e88047c7d398f098302b9485d07cf5549ca0d72467102aafa69298e248250df154a8b09f7560e634cca9cb1af2838baf3965aa645b31
- SSDEEP 768:Zq2Z1jRTnTpK4EBwmUy6fRXLvXcU8knpZlvliQVk3+aIS1GzsQxDzpYElRgyszhL:ZNnlK4EBwmUy6fRXLvXD8knPq+lS1cs5
- TLSH
  T1E0235CD775E05EB2C7CF0A35A19061024F3BF3735A52C763694D029266823E53CF66DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuShapes.dll
- Size 41KB
- SHA256 77191715d649c33ab2b4e1a976349252abcf6628012515e881f2e65d0d4a9709
- MD5 766bac8424dff377682453d70a9a8ac4
- SHA1 1cea8cb48d0e33c010bce20244520b79491f6e6c
- SHA512 06b00c021342748bf147736ccbc93ab286d985fc0bd26dc3e9ff4290eaa3997b5105a1b4d365fcfe24099333d1d608b06a19456c28c7e4049c29cdf099b317e2
- SSDEEP 768:lsXwjYdAepHnxwo64Giy/UhHPzWByJ9+4jhQTi+P:/sAQHxwoGbUBWByJheTB
- TLSH
  T155132AA1B2B85FA1C79E0B3A35B092014F31F8873961D71B1A4C01A51B967D31EEEEE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31
- Target
  Umbral-Stealer-main/Umbral.builder/libs/Bunifu/Bunifu.UI.WinForms.BunifuSlider.dll
- Size 196KB
- SHA256 22e686373bb1556ec3e044061c727c7b11cb1e6ad3b15862ed7e815e35567df9
- MD5 9914005dedbf5f81be2741ce71cbe63f
- SHA1 493a5a01dabf629192fe90f15194587e5814dba2
- SHA512 be5037ab18c8b45f0661035151f0fc05f387bd69b9b62fb3ba3380204a094f45e78ebb181616e2eeff7347622122bca82a64ecfe4d48aeb6899c4038f1d11fa3
- SSDEEP 6144:ktwUO/j558MwE2ogicLoqP+QBwa/oZnyazz5s:YwUO/j558MwAccqP+c/oZym5s
- TLSH
  T125141A01E0EA5E72C34B473BF5902182FB789A103E5DDB1AED8A11E84FD376EB54506B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Visual Basic

T1059.005

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32