General
- Target uhumstrap.exe
- Size 21.9MB
- Sample260803-vg3kmafp4s
- SHA256 9603309cce879c0994817fbdbef9a581f47788d65e2b54ef867a233ed6766961
- MD5 52ca3e1c2e3b3a6537790720b1ef8878
- SHA1 13ba561b14086c0deb9775f1e230d6d64371eaad
- SHA512 9b5d8ae4fdf24c8b48e0cf571311ebffdbb3a8a572ca57c93535de0b74830b59ff7af9672b2a748475065c2dde9e9205bffa636a085b3af157bafb004222b095
- SSDEEP 393216:s1biodjs14bMgLc9zGdGths0Pd6jXEAphVtnIUQSg+FZcaIntRPvF7dMGl9c:J2G4TLcNOiPojRphDto+jcaInt5vF7Xc
- TLSH T1A0373359A7D035F6E8F784395952C231A3B1B6503FA0D2EF1BE90A162C3B6D00A7D376
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
uhumstrap.exe
Resource
win11-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
uhumstrap.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
main.pyc
Resource
win11-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
main.pyc
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target uhumstrap.exe
- Size 21.9MB
- SHA256 9603309cce879c0994817fbdbef9a581f47788d65e2b54ef867a233ed6766961
- MD5 52ca3e1c2e3b3a6537790720b1ef8878
- SHA1 13ba561b14086c0deb9775f1e230d6d64371eaad
- SHA512 9b5d8ae4fdf24c8b48e0cf571311ebffdbb3a8a572ca57c93535de0b74830b59ff7af9672b2a748475065c2dde9e9205bffa636a085b3af157bafb004222b095
- SSDEEP 393216:s1biodjs14bMgLc9zGdGths0Pd6jXEAphVtnIUQSg+FZcaIntRPvF7dMGl9c:J2G4TLcNOiPojRphDto+jcaInt5vF7Xc
- TLSH T1A0373359A7D035F6E8F784395952C231A3B1B6503FA0D2EF1BE90A162C3B6D00A7D376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target main.pyc
- Size 5KB
- SHA256 f5f81260428dbf8350f6e9581abd52f1165eaae9eea24fbcd34ff0e33b9fa504
- MD5 8e38d414acacc160267808a614ee6b7c
- SHA1 4b543ecea362d04e2e574cab79dd81b07e47f73b
- SHA512 6515d73a79fe7fd25481650e6d3ced3087fd8ba74a980f4e7f763081aae1ba12c6a97fc889e1b308c2aec3485e5bb7b4cbe23951920adc4bf6057ff27b61241f
- SSDEEP 96:MQ9yELmx5bca9B+vhuXknxRL772gW0EC9Xfu35cuC:MQ9yELmHlB+u0nTyFGuyuC
- TLSH T1A9C1F7F59788F53BE8ADA43D32C788813361859075B0EA52F924C4FE5ECC61688A430F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10