Overview
overview
10Static
static
7Pumpkhn_Un...1).exe
windows10-2004-x64
9Pumpkhn_Un...1).exe
windows11-ltsc_2024-x64
9Pumpkhn_Un...ep.exe
windows10-2004-x64
10Pumpkhn_Un...ep.exe
windows11-ltsc_2024-x64
10Pumpkhn_Un...IN.exe
windows10-2004-x64
3Pumpkhn_Un...IN.exe
windows11-ltsc_2024-x64
3Pumpkhn_Un...64.exe
windows10-2004-x64
1Pumpkhn_Un...64.exe
windows11-ltsc_2024-x64
1Pumpkhn_Un...16.exe
windows10-2004-x64
Pumpkhn_Un...16.exe
windows11-ltsc_2024-x64
Pumpkhn_Un...IT.exe
windows10-2004-x64
1Pumpkhn_Un...IT.exe
windows11-ltsc_2024-x64
1Pumpkhn_Un...LL.dll
windows10-2004-x64
3Pumpkhn_Un...LL.dll
windows11-ltsc_2024-x64
3Pumpkhn_Un...YS.sys
windows10-2004-x64
3Pumpkhn_Un...YS.sys
windows11-ltsc_2024-x64
3Pumpkhn_Un...64.sys
windows10-2004-x64
3Pumpkhn_Un...64.sys
windows11-ltsc_2024-x64
3Pumpkhn_Un...64.sys
windows10-2004-x64
3Pumpkhn_Un...64.sys
windows11-ltsc_2024-x64
3Pumpkhn_Un...H1.exe
windows10-2004-x64
3Pumpkhn_Un...H1.exe
windows11-ltsc_2024-x64
8Pumpkhn_Un...er.exe
windows10-2004-x64
6Pumpkhn_Un...er.exe
windows11-ltsc_2024-x64
6Pumpkhn_Un...AC.exe
windows10-2004-x64
7Pumpkhn_Un...AC.exe
windows11-ltsc_2024-x64
8Pumpkhn_Un...er.bat
windows10-2004-x64
4Pumpkhn_Un...er.bat
windows11-ltsc_2024-x64
8Analysis
- max time kernel
898s - max time network
488s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/11/2026, 12:59
Behavioral task
behavioral1
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/AppleCleaner (1).exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/AppleCleaner (1).exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/CleanBan_SysPrep.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/CleanBan_SysPrep.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/AMIDEWIN.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/AMIDEWIN.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/AMIDEWINx64.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/AMIDEWINx64.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/DMI16.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/DMI16.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/DMIEDIT.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/DMIEDIT.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCOREDLL.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCOREDLL.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCORESYS.sys
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCORESYS.sys
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCOREW64.sys
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCOREW64.sys
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/amifldrv64.sys
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/amifldrv64.sys
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/FN Cleaner/FortniteTracerCleaner1803-21H1.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/FN Cleaner/FortniteTracerCleaner1803-21H1.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/HWID Key Changer.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/HWID Key Changer.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/TMAC.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/TMAC.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/serial_checker.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/serial_checker.bat
Resource
win11ltsc2024-20260911-en
General
- Target Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCORESYS.sys
- Size 15KB
- Sample261102-p77pdatwht
- SHA256 fd6f56189cd723b32fc06392867fcd5128e63d8b5801e4f7a83523f820531981
- MD5 9555d36fb21b993e5c4b98c2fc2b3671
- SHA1 210a98be7da32cea98618c5a9640c23ce518c0ee
- SHA512 3ec96ba6fca7a4aa45becfef84b23b12c305f34045ac1a15b22745289e33b9326103e853bad698434df772a76515e7e8109fa8724d65f0351ee380c16d888c60
- SSDEEP 384:pp4uPb5yDmnoMXP1oy5KYJLWd6jH9inbjJE:pp4sEmTDLAmH94b6
- TLSH T194623CD20B603432EDB70FB14486C7B7DEB392820D96855721349A8E1FC6BB12798D9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 2012 cmd.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Pumpkhn_UnhwidBan\Unhwidban\hwid\FIles\DmiEdit\UCORESYS.sys1⤵
- Executes a command shell one-liner
PID:2012 -
C:\Users\Admin\AppData\Local\Temp\Pumpkhn_UnhwidBan\Unhwidban\hwid\FIles\DmiEdit\UCORESYS.sysC:\Users\Admin\AppData\Local\Temp\Pumpkhn_UnhwidBan\Unhwidban\hwid\FIles\DmiEdit\UCORESYS.sys2⤵PID:4636
-