Overview
overview
10Static
static
7Pumpkhn_Un...1).exe
windows10-2004-x64
9Pumpkhn_Un...1).exe
windows11-ltsc_2024-x64
9Pumpkhn_Un...ep.exe
windows10-2004-x64
10Pumpkhn_Un...ep.exe
windows11-ltsc_2024-x64
10Pumpkhn_Un...IN.exe
windows10-2004-x64
3Pumpkhn_Un...IN.exe
windows11-ltsc_2024-x64
3Pumpkhn_Un...64.exe
windows10-2004-x64
1Pumpkhn_Un...64.exe
windows11-ltsc_2024-x64
1Pumpkhn_Un...16.exe
windows10-2004-x64
Pumpkhn_Un...16.exe
windows11-ltsc_2024-x64
Pumpkhn_Un...IT.exe
windows10-2004-x64
1Pumpkhn_Un...IT.exe
windows11-ltsc_2024-x64
1Pumpkhn_Un...LL.dll
windows10-2004-x64
3Pumpkhn_Un...LL.dll
windows11-ltsc_2024-x64
3Pumpkhn_Un...YS.sys
windows10-2004-x64
3Pumpkhn_Un...YS.sys
windows11-ltsc_2024-x64
3Pumpkhn_Un...64.sys
windows10-2004-x64
3Pumpkhn_Un...64.sys
windows11-ltsc_2024-x64
3Pumpkhn_Un...64.sys
windows10-2004-x64
3Pumpkhn_Un...64.sys
windows11-ltsc_2024-x64
3Pumpkhn_Un...H1.exe
windows10-2004-x64
3Pumpkhn_Un...H1.exe
windows11-ltsc_2024-x64
8Pumpkhn_Un...er.exe
windows10-2004-x64
6Pumpkhn_Un...er.exe
windows11-ltsc_2024-x64
6Pumpkhn_Un...AC.exe
windows10-2004-x64
7Pumpkhn_Un...AC.exe
windows11-ltsc_2024-x64
8Pumpkhn_Un...er.bat
windows10-2004-x64
4Pumpkhn_Un...er.bat
windows11-ltsc_2024-x64
8Analysis
- max time kernel
898s - max time network
489s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/11/2026, 12:59
Behavioral task
behavioral1
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/AppleCleaner (1).exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/AppleCleaner (1).exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/CleanBan_SysPrep.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/CleanBan_SysPrep.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/AMIDEWIN.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/AMIDEWIN.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/AMIDEWINx64.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/AMIDEWINx64.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/DMI16.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/DMI16.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/DMIEDIT.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/DMIEDIT.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCOREDLL.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCOREDLL.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCORESYS.sys
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCORESYS.sys
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCOREW64.sys
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/UCOREW64.sys
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/amifldrv64.sys
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/amifldrv64.sys
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/FN Cleaner/FortniteTracerCleaner1803-21H1.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/FN Cleaner/FortniteTracerCleaner1803-21H1.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/HWID Key Changer.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/HWID Key Changer.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/TMAC.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/TMAC.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/serial_checker.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/serial_checker.bat
Resource
win11ltsc2024-20260911-en
General
- Target Pumpkhn_UnhwidBan/Unhwidban/hwid/FIles/DmiEdit/AMIDEWIN.exe
- Size 148KB
- Sample261102-p77pdatwht
- SHA256 948dbd2bc128f8dc08267e110020fee3ff5de17cf4aaef89372de29623af96fa
- MD5 182ec3a59bd847fb1bc3e12a41d48fa6
- SHA1 2f548bceb819d3843827c1e218af6708db447d4b
- SHA512 91ecc5a76edc2aea4219f68569b54d3e9fe15c2a30a146edc0d09e713feaa739a5c1e7dbfa97e60828696078d43d1f8fd3466234525b099ed6e614e854ac6c4c
- SSDEEP 1536:tNFrdLFZ7JxIVhlPBo8Upxwpwf+gHkow3SMT4HOw2htj6oANy/ht+vSMoqEcViWw:Pv7JIhlBAKwf+gWCM4OwyWscSMoqtLe
- TLSH T14AE36C1639D01CB2E861863144B99F21EB37DD38066142A3F79C92D61F897B0AF3D76E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language AMIDEWIN.exe