Overview

overview

10

Static

static

10

NOVA PT.exe

windows10-2004-x64

10

NOVA PT.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    NOVA PT.exe
  • Size 229KB
  • Sample261106-ym23ts1w2m
  • SHA256 f7b9d22777e12fb2b92c525f934f93444cd29c3fdd6bef355263df56ff6a1e5b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
umbraldiscoverystealer

Malware Config

Extracted

Family

  • umbral

Version

  • v1.0

C2

  • https://ptb.discord.com/api/webhooks/1568331236257038556/LjnV8r7jh8PrH2izpeV0yxP_nt0aZf2NcWf-Yrc-CE3J6-W3nNXJGBtb4-dFGWWZ-0KZ

Targets

    • Target
      NOVA PT.exe
    • Size 229KB
    • SHA256 f7b9d22777e12fb2b92c525f934f93444cd29c3fdd6bef355263df56ff6a1e5b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryumbralstealer

    • Detects Umbral payload

    • Family: Umbral

      Umbral stealer is an open-source modular stealer written in C#.

      stealerumbral

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks