Analysis
- max time kernel
148s - max time network
135s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/10/2026, 17:03
Behavioral task
behavioral1
Sample
Umbral.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
General
- Target Umbral.exe
- Size 230KB
- Sample261024-vkpsyaz12p
- SHA256 23d651ed623affcb1b71457c07c4f887a6ac44b04ceef74850292ab38d1b3287
- MD5 da7d94f96e8b7f035020b7721e968ec1
- SHA1 a30abe39a9e27e5eb76fb509eb4f9edeb7c36f5e
- SHA512 181bf779331cbe6f456a44963004e84d8850e1a61350bae66c4e5001d185740c5fbab44b536e3e055871029db23409db376778488ea1d0098ac89786387bd6e2
- SSDEEP 3072:WP+1vofuiMY9QF1c7ROhOtXrLmBGIgXyPyTuuu5bO4ickEw8eFJMwT0kE/0RQ:lQ9Q4XYuTuuufS8eFJLhE
- TLSH T1EA345C4817B88E21D7AF4FFC56A0529B8FB1F147E44EF7CD0DC45ADC2826782A484A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Detects Umbral payload 2 IoCs
resource yara_rule behavioral2/memory/3120-0-0x000001EC6ACC0000-0x000001EC6AD00000-memory.dmp family_umbral behavioral2/memory/3120-0-0x000001EC6ACC0000-0x000001EC6AD00000-memory.dmp family_umbral_obfuscated