Overview

overview

8

Static

static

KMS_VL_ALL-48.rar

windows7-x64

3

KMS_VL_ALL-48.rar

windows10-2004-x64

3

KMS_VL_ALL...64.dll

windows7-x64

1

KMS_VL_ALL...64.dll

windows10-2004-x64

1

KMS_VL_ALL...er.xml

windows7-x64

1

KMS_VL_ALL...er.xml

windows10-2004-x64

1

KMS_VL_ALL...64.exe

windows7-x64

1

KMS_VL_ALL...64.exe

windows10-2004-x64

1

KMS_VL_ALL...86.exe

windows7-x64

1

KMS_VL_ALL...86.exe

windows10-2004-x64

1

KMS_VL_ALL...64.dll

windows7-x64

1

KMS_VL_ALL...64.dll

windows10-2004-x64

1

KMS_VL_ALL...86.dll

windows7-x64

1

KMS_VL_ALL...86.dll

windows10-2004-x64

1

KMS_VL_ALL...te.cmd

windows7-x64

8

KMS_VL_ALL...te.cmd

windows10-2004-x64

8

KMS_VL_ALL...te.cmd

windows7-x64

8

KMS_VL_ALL...te.cmd

windows10-2004-x64

8

KMS_VL_ALL...up.wsf

windows7-x64

1

KMS_VL_ALL...up.wsf

windows10-2004-x64

1

KMS_VL_ALL...bs.cmd

windows7-x64

1

KMS_VL_ALL...bs.cmd

windows10-2004-x64

1

KMS_VL_ALL...mi.wsf

windows7-x64

1

KMS_VL_ALL...mi.wsf

windows10-2004-x64

1

KMS_VL_ALL...e.html

windows7-x64

1

KMS_VL_ALL...e.html

windows10-2004-x64

1

KMS_VL_ALL...64.dll

windows7-x64

1

KMS_VL_ALL...64.dll

windows10-2004-x64

1

KMS_VL_ALL...er.xml

windows7-x64

1

KMS_VL_ALL...er.xml

windows10-2004-x64

1

KMS_VL_ALL...64.exe

windows7-x64

1

KMS_VL_ALL...64.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    KMS_VL_ALL-48.rar

  • Size

    168KB

  • MD5

    71b622e792f61d5c88b0cd7c6ac4e400

  • SHA1

    24e3b4f398318e343f9afadc548ffadbe227833b

  • SHA256

    bcf15ebad8466370abfc952d899c22a09c2689a808382eef04dcdd0c04b1ca83

  • SHA512

    91f9661df06c64388f3b6585607fdf29eaf27600f9773aeeb6936738df7e25bbfae372b30b9e9ab20dbcb7c5482addb51421e184e8c12830e4c3d3fe46f3b067

  • SSDEEP

    3072:c12OR0l1GoFe9Ae3eB1lMgTzklAgGpuJcZWl2M1MOR0l1vW5e9A/t2QXV:Y2OR0je9AeuTdTzk3GpuqWlLMOR0se9i

Score
N/A

Malware Config

Signatures

Files

  • KMS_VL_ALL-48.rar
    .rar
  • KMS_VL_ALL-48/$OEM$/$$/Setup/Scripts/bin/A64.dll
  • KMS_VL_ALL-48/$OEM$/$$/Setup/Scripts/bin/SvcTrigger.xml
  • KMS_VL_ALL-48/$OEM$/$$/Setup/Scripts/bin/cleanosppx64.exe
    .exe windows x64

    3e0977438b3a99ae7d9af893f9538893


    Headers

    Imports

    Sections

  • KMS_VL_ALL-48/$OEM$/$$/Setup/Scripts/bin/cleanosppx86.exe
    .exe windows x86

    0393153f08fe5c66b5966a4f45bd77d4


    Headers

    Imports

    Sections

  • KMS_VL_ALL-48/$OEM$/$$/Setup/Scripts/bin/x64.dll
    .dll windows x64

    09aa7a1a68855623e3ac071d6080ef31


    Headers

    Imports

    Sections

  • KMS_VL_ALL-48/$OEM$/$$/Setup/Scripts/bin/x86.dll
    .dll windows x86

    8a7f219820c2adf212c4edf3841eebff


    Headers

    Imports

    Sections

  • KMS_VL_ALL-48/$OEM$/$$/Setup/Scripts/setupcomplete.cmd
    .cmd .vbs
  • KMS_VL_ALL-48/Activate.cmd
    .cmd .vbs
  • KMS_VL_ALL-48/AutoRenewal-Setup.cmd
    .wsf .vbs
  • KMS_VL_ALL-48/Check-Activation-Status-vbs.cmd
    .cmd .vbs
  • KMS_VL_ALL-48/Check-Activation-Status-wmi.cmd
    .wsf .vbs
  • KMS_VL_ALL-48/ReadMe.html
  • KMS_VL_ALL-48/bin/A64.dll
  • KMS_VL_ALL-48/bin/SvcTrigger.xml
  • KMS_VL_ALL-48/bin/cleanosppx64.exe
    .exe windows x64

    3e0977438b3a99ae7d9af893f9538893


    Headers

    Imports

    Sections

  • KMS_VL_ALL-48/bin/cleanosppx86.exe
    .exe windows x86

    0393153f08fe5c66b5966a4f45bd77d4


    Headers

    Imports

    Sections

  • KMS_VL_ALL-48/bin/x64.dll
    .dll windows x64

    09aa7a1a68855623e3ac071d6080ef31


    Headers

    Imports

    Sections

  • KMS_VL_ALL-48/bin/x86.dll
    .dll windows x86

    8a7f219820c2adf212c4edf3841eebff


    Headers

    Imports

    Sections