Overview
overview
3Static
static
3Umaviewer/...er.exe
windows10-2004-x64
1Umaviewer/...er.exe
windows11-ltsc_2024-x64
1Umaviewer/...er.dll
windows10-2004-x64
1Umaviewer/...er.dll
windows11-ltsc_2024-x64
1Umaviewer/...8N.dll
windows10-2004-x64
1Umaviewer/...8N.dll
windows11-ltsc_2024-x64
1Umaviewer/...ms.dll
windows10-2004-x64
1Umaviewer/...ms.dll
windows11-ltsc_2024-x64
1Umaviewer/...ix.dll
windows10-2004-x64
1Umaviewer/...ix.dll
windows11-ltsc_2024-x64
1Umaviewer/...er.dll
windows10-2004-x64
1Umaviewer/...er.dll
windows11-ltsc_2024-x64
1Umaviewer/...on.dll
windows10-2004-x64
1Umaviewer/...on.dll
windows11-ltsc_2024-x64
1Umaviewer/...ns.dll
windows10-2004-x64
1Umaviewer/...ns.dll
windows11-ltsc_2024-x64
1Umaviewer/...ns.dll
windows10-2004-x64
1Umaviewer/...ns.dll
windows11-ltsc_2024-x64
1Umaviewer/...ta.dll
windows10-2004-x64
1Umaviewer/...ta.dll
windows11-ltsc_2024-x64
1Umaviewer/...gn.dll
windows10-2004-x64
1Umaviewer/...gn.dll
windows11-ltsc_2024-x64
1Umaviewer/...es.dll
windows10-2004-x64
1Umaviewer/...es.dll
windows11-ltsc_2024-x64
1Umaviewer/...em.dll
windows10-2004-x64
1Umaviewer/...em.dll
windows11-ltsc_2024-x64
1Umaviewer/...cs.dll
windows10-2004-x64
1Umaviewer/...cs.dll
windows11-ltsc_2024-x64
1Umaviewer/...ml.dll
windows10-2004-x64
1Umaviewer/...ml.dll
windows11-ltsc_2024-x64
1Umaviewer/...st.dll
windows10-2004-x64
1Umaviewer/...st.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
150s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/07/2026, 02:00
Static task
static1
Behavioral task
behavioral1
Sample
Umaviewer/UmaViewer.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Umaviewer/UmaViewer.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
Umaviewer/UmaViewer_Data/Managed/HSVPicker.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Umaviewer/UmaViewer_Data/Managed/HSVPicker.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Umaviewer/UmaViewer_Data/Managed/I18N.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Umaviewer/UmaViewer_Data/Managed/I18N.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Umaviewer/UmaViewer_Data/Managed/K4os.Compression.LZ4.Streams.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Umaviewer/UmaViewer_Data/Managed/K4os.Compression.LZ4.Streams.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Umaviewer/UmaViewer_Data/Managed/Mono.Posix.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Umaviewer/UmaViewer_Data/Managed/Mono.Posix.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Umaviewer/UmaViewer_Data/Managed/Mono.WebBrowser.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Umaviewer/UmaViewer_Data/Managed/Mono.WebBrowser.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
Umaviewer/UmaViewer_Data/Managed/Newtonsoft.Json.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Umaviewer/UmaViewer_Data/Managed/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Umaviewer/UmaViewer_Data/Managed/Plugins.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Umaviewer/UmaViewer_Data/Managed/Plugins.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Umaviewer/UmaViewer_Data/Managed/System.ComponentModel.DataAnnotations.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Umaviewer/UmaViewer_Data/Managed/System.ComponentModel.DataAnnotations.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Umaviewer/UmaViewer_Data/Managed/System.Data.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Umaviewer/UmaViewer_Data/Managed/System.Data.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Umaviewer/UmaViewer_Data/Managed/System.Design.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Umaviewer/UmaViewer_Data/Managed/System.Design.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
Umaviewer/UmaViewer_Data/Managed/System.DirectoryServices.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Umaviewer/UmaViewer_Data/Managed/System.DirectoryServices.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Umaviewer/UmaViewer_Data/Managed/System.IO.Compression.FileSystem.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Umaviewer/UmaViewer_Data/Managed/System.IO.Compression.FileSystem.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Umaviewer/UmaViewer_Data/Managed/System.Numerics.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Umaviewer/UmaViewer_Data/Managed/System.Numerics.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral29
Sample
Umaviewer/UmaViewer_Data/Managed/System.Xml.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Umaviewer/UmaViewer_Data/Managed/System.Xml.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
Umaviewer/UmaViewer_Data/Managed/Unity.Burst.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Umaviewer/UmaViewer_Data/Managed/Unity.Burst.dll
Resource
win11ltsc2024-20260709-en
General
- Target Umaviewer/UmaViewer.exe
- Size 651KB
- Sample260728-ce738ahn7v
- SHA256 56be2872e652fa8f88af4076e816feeb42d01b329094a87596048f201346c7c6
- MD5 c6f196e63e6f46e2f0f46af3a00392b9
- SHA1 dea66c3f6335e4a347565104a6103205188c7b95
- SHA512 c2c9a366b6e9b95cdd1af58cff73cf294b0a7e6c0ae04239d33462ca80e87657e44dfec5c1cdc61778ae5b71089568fb56a2c93b1a19c9f370030669db0252a8
- SSDEEP 12288:5/744aOD8O+tgMj9GTyGa78oVQzLPpoC8n:h9aOugMj9GTyGaQouPxen
- TLSH T188E4711F60C99AA1C737C8377496D02B4A5B1CFAE69528B77B8837110573C971E0FAB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 4972 wrote to memory of 5172 4972 UmaViewer.exe 88 PID 5172 wrote to memory of 4900 5172 UnityCrashHandler64.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\Umaviewer\UmaViewer.exe"C:\Users\Admin\AppData\Local\Temp\Umaviewer\UmaViewer.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:4972 -
C:\Users\Admin\AppData\Local\Temp\Umaviewer\UnityCrashHandler64.exe"C:\Users\Admin\AppData\Local\Temp\Umaviewer\UnityCrashHandler64.exe" --attach 4972 21610171637762⤵
- Suspicious use of WriteProcessMemory
PID:5172 -
C:\Users\Admin\AppData\Local\Temp\Umaviewer\UnityCrashHandler64.exe"C:\Users\Admin\AppData\Local\Temp\Umaviewer\UnityCrashHandler64.exe" "4972" "2161017163776"3⤵PID:4900
-
-