General
- Target umi.exe
- Size 8.4MB
- Sample260822-p6gfssfb22
- SHA256 fbc00d6f610dcd69fd75a70ce9d09020a0f0cbd65288983ea753f809ea791f84
- MD5 c3b84bb3823c9584d0374701d8145b4a
- SHA1 ce30b5d3e32b470024e9276f88724b11a4f06200
- SHA512 ba1fd684522b2d2f6f0ace90e52a97d70e93c80ef61e0dfabd965f6bf3bd5e14299447298e2626072986a0b6b26573ff7edcdbb5fe1d40b00b18b6a7c5aa746c
- SSDEEP 98304:0+VysLjqyKSARbU9pbZKvUlJf21tLAfS9GvaGBUuzbErFloX0nPEj16xYYYd/Xnr:0kaR43oJ1tWS9VrdsoA/XP8
- TLSH T152965A53F76280E8C17AC074935A6233FA617C494B357AEB5BE04B213E65F906B3DB18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
umi.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
umi.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target umi.exe
- Size 8.4MB
- SHA256 fbc00d6f610dcd69fd75a70ce9d09020a0f0cbd65288983ea753f809ea791f84
- MD5 c3b84bb3823c9584d0374701d8145b4a
- SHA1 ce30b5d3e32b470024e9276f88724b11a4f06200
- SHA512 ba1fd684522b2d2f6f0ace90e52a97d70e93c80ef61e0dfabd965f6bf3bd5e14299447298e2626072986a0b6b26573ff7edcdbb5fe1d40b00b18b6a7c5aa746c
- SSDEEP 98304:0+VysLjqyKSARbU9pbZKvUlJf21tLAfS9GvaGBUuzbErFloX0nPEj16xYYYd/Xnr:0kaR43oJ1tWS9VrdsoA/XP8
- TLSH T152965A53F76280E8C17AC074935A6233FA617C494B357AEB5BE04B213E65F906B3DB18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.