Overview

overview

8

Static

static

KMS_VL_ALL-48.zip

windows7-x64

1

KMS_VL_ALL-48.zip

windows10-2004-x64

1

KMS_VL_ALL...64.dll

windows7-x64

1

KMS_VL_ALL...64.dll

windows10-2004-x64

1

KMS_VL_ALL...er.xml

windows7-x64

1

KMS_VL_ALL...er.xml

windows10-2004-x64

1

KMS_VL_ALL...64.exe

windows7-x64

1

KMS_VL_ALL...64.exe

windows10-2004-x64

1

KMS_VL_ALL...86.exe

windows7-x64

1

KMS_VL_ALL...86.exe

windows10-2004-x64

1

KMS_VL_ALL...64.dll

windows7-x64

1

KMS_VL_ALL...64.dll

windows10-2004-x64

1

KMS_VL_ALL...86.dll

windows7-x64

1

KMS_VL_ALL...86.dll

windows10-2004-x64

1

KMS_VL_ALL...te.cmd

windows7-x64

8

KMS_VL_ALL...te.cmd

windows10-2004-x64

8

KMS_VL_ALL...te.cmd

windows7-x64

8

KMS_VL_ALL...te.cmd

windows10-2004-x64

8

KMS_VL_ALL...up.wsf

windows7-x64

1

KMS_VL_ALL...up.wsf

windows10-2004-x64

1

KMS_VL_ALL...bs.cmd

windows7-x64

1

KMS_VL_ALL...bs.cmd

windows10-2004-x64

1

KMS_VL_ALL...mi.wsf

windows7-x64

1

KMS_VL_ALL...mi.wsf

windows10-2004-x64

1

KMS_VL_ALL...e.html

windows7-x64

1

KMS_VL_ALL...e.html

windows10-2004-x64

1

KMS_VL_ALL...64.dll

windows7-x64

1

KMS_VL_ALL...64.dll

windows10-2004-x64

1

KMS_VL_ALL...er.xml

windows7-x64

1

KMS_VL_ALL...er.xml

windows10-2004-x64

1

KMS_VL_ALL...64.exe

windows7-x64

1

KMS_VL_ALL...64.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    KMS_VL_ALL-48.zip

  • Size

    177KB

  • MD5

    fe3839aa99bef199f2d7c0b8fb5f3e4f

  • SHA1

    991fb17de8ff3237eb60f4d3a2e5589f223dbadf

  • SHA256

    2d68423801571f23b42a127504ad58a9aa7fa59317c93715de4946db5ab0b09a

  • SHA512

    2bf0a3ac55694474278ab5bc4e82a91e089dc1f78c010b55e64eedd45b174c39a90ed8e7086d5d21f6fd85fcbff50d1b0f1e32ab3358c9414fedade342ca6c21

  • SSDEEP

    3072:ZaeNtTrMNOZ8DR1SaqDUYOA4QBLj5qNgnPDFLVTBwlmle6aeN0TrpVOZ8DRwSaqf:wOtrMgWR/X9A4GjyAPDvTi6e3OcrpYW5

Score
N/A

Malware Config

Signatures

Files

  • KMS_VL_ALL-48.zip
    .zip
  • KMS_VL_ALL-48/$OEM$/$$/Setup/Scripts/bin/A64.dll
  • KMS_VL_ALL-48/$OEM$/$$/Setup/Scripts/bin/SvcTrigger.xml
  • KMS_VL_ALL-48/$OEM$/$$/Setup/Scripts/bin/cleanosppx64.exe
    .exe windows x64

    3e0977438b3a99ae7d9af893f9538893


    Headers

    Imports

    Sections

  • KMS_VL_ALL-48/$OEM$/$$/Setup/Scripts/bin/cleanosppx86.exe
    .exe windows x86

    0393153f08fe5c66b5966a4f45bd77d4


    Headers

    Imports

    Sections

  • KMS_VL_ALL-48/$OEM$/$$/Setup/Scripts/bin/x64.dll
    .dll windows x64

    09aa7a1a68855623e3ac071d6080ef31


    Headers

    Imports

    Sections

  • KMS_VL_ALL-48/$OEM$/$$/Setup/Scripts/bin/x86.dll
    .dll windows x86

    8a7f219820c2adf212c4edf3841eebff


    Headers

    Imports

    Sections

  • KMS_VL_ALL-48/$OEM$/$$/Setup/Scripts/setupcomplete.cmd
    .cmd .vbs
  • KMS_VL_ALL-48/Activate.cmd
    .cmd .vbs
  • KMS_VL_ALL-48/AutoRenewal-Setup.cmd
    .wsf .vbs
  • KMS_VL_ALL-48/Check-Activation-Status-vbs.cmd
    .cmd .vbs
  • KMS_VL_ALL-48/Check-Activation-Status-wmi.cmd
    .wsf .vbs
  • KMS_VL_ALL-48/ReadMe.html
  • KMS_VL_ALL-48/bin/A64.dll
  • KMS_VL_ALL-48/bin/SvcTrigger.xml
  • KMS_VL_ALL-48/bin/cleanosppx64.exe
    .exe windows x64

    3e0977438b3a99ae7d9af893f9538893


    Headers

    Imports

    Sections

  • KMS_VL_ALL-48/bin/cleanosppx86.exe
    .exe windows x86

    0393153f08fe5c66b5966a4f45bd77d4


    Headers

    Imports

    Sections

  • KMS_VL_ALL-48/bin/x64.dll
    .dll windows x64

    09aa7a1a68855623e3ac071d6080ef31


    Headers

    Imports

    Sections

  • KMS_VL_ALL-48/bin/x86.dll
    .dll windows x86

    8a7f219820c2adf212c4edf3841eebff


    Headers

    Imports

    Sections