Overview
overview
4Static
static
1Microsoft ...IO.cmd
windows7-x64
1Microsoft ...IO.cmd
windows10-2004-x64
1Microsoft ...on.cmd
windows7-x64
1Microsoft ...on.cmd
windows10-2004-x64
1Microsoft ...on.cmd
windows7-x64
1Microsoft ...on.cmd
windows10-2004-x64
1Microsoft ...on.cmd
windows7-x64
1Microsoft ...on.cmd
windows10-2004-x64
1Microsoft ...on.cmd
windows7-x64
1Microsoft ...on.cmd
windows10-2004-x64
1Microsoft ...bs.cmd
windows7-x64
1Microsoft ...bs.cmd
windows10-2004-x64
1Microsoft ...mi.cmd
windows7-x64
4Microsoft ...mi.cmd
windows10-2004-x64
4Microsoft ...er.cmd
windows7-x64
1Microsoft ...er.cmd
windows10-2004-x64
1Microsoft ...ey.cmd
windows7-x64
1Microsoft ...ey.cmd
windows10-2004-x64
1Microsoft ...ot.cmd
windows7-x64
1Microsoft ...ot.cmd
windows10-2004-x64
1Microsoft ...e.html
windows7-x64
1Microsoft ...e.html
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Microsoft Activation Scripts 1.8/All-In-One-Version/MAS_AIO.cmd
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Microsoft Activation Scripts 1.8/All-In-One-Version/MAS_AIO.cmd
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/Activators/HWID_Activation.cmd
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/Activators/HWID_Activation.cmd
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/Activators/KMS38_Activation.cmd
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/Activators/KMS38_Activation.cmd
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/Activators/Online_KMS_Activation.cmd
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/Activators/Online_KMS_Activation.cmd
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/Change_Edition.cmd
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/Change_Edition.cmd
Resource
win10v2004-20230221-en
Behavioral task
behavioral11
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/Check-Activation-Status-vbs.cmd
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/Check-Activation-Status-vbs.cmd
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/Check-Activation-Status-wmi.cmd
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/Check-Activation-Status-wmi.cmd
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/Extract_OEM_Folder.cmd
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/Extract_OEM_Folder.cmd
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/Install_HWID_Key.cmd
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/Install_HWID_Key.cmd
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/Troubleshoot.cmd
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/Troubleshoot.cmd
Resource
win10v2004-20230221-en
Behavioral task
behavioral21
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/_ReadMe.html
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
Microsoft Activation Scripts 1.8/Separate-Files-Version/_ReadMe.html
Resource
win10v2004-20230220-en
General
-
Target
Microsoft Activation Scripts 1.8 [FileCR].zip
-
Size
190KB
-
MD5
16e282907f737ad09dbb1a51bb7e4af0
-
SHA1
b036abf8e95d8fb9146c3dec5856ee742a4d4170
-
SHA256
29acbf1f7f8b09c28af7744c8a46972a07c2ce7d6c13cc2f9708649abb7f471a
-
SHA512
effb6c6e343206ac9c13db3523599ab00f4daa394d1b11f6b02eb010e13de5adfb8f8bc3be875f160605ca2edff2f4d61efe18ab5298698c41ba0da9da1823d0
-
SSDEEP
3072:YI1+VgfLJKrk6+cT1JUJl7sUgmxnc7T/G6k4E93ulFKeZE2p00SyWIzSlAIELd:X+yVKrk6+21ySmZc7Tw4E93SFOpyqOI6
Malware Config
Signatures
Files
-
Microsoft Activation Scripts 1.8 [FileCR].zip.zip
Password: 123
-
Microsoft Activation Scripts 1.8/All-In-One-Version/MAS_AIO.cmd.cmd .vbs
-
Microsoft Activation Scripts 1.8/Separate-Files-Version/Activators/HWID_Activation.cmd.cmd .vbs
-
Microsoft Activation Scripts 1.8/Separate-Files-Version/Activators/KMS38_Activation.cmd.cmd .vbs
-
Microsoft Activation Scripts 1.8/Separate-Files-Version/Activators/Online_KMS_Activation.cmd.cmd .vbs
-
Microsoft Activation Scripts 1.8/Separate-Files-Version/Change_Edition.cmd.cmd .ps1
-
Microsoft Activation Scripts 1.8/Separate-Files-Version/Check-Activation-Status-vbs.cmd.cmd .vbs
-
Microsoft Activation Scripts 1.8/Separate-Files-Version/Check-Activation-Status-wmi.cmd.cmd .vbs
-
Microsoft Activation Scripts 1.8/Separate-Files-Version/Extract_OEM_Folder.cmd.cmd .vbs
-
Microsoft Activation Scripts 1.8/Separate-Files-Version/Install_HWID_Key.cmd.cmd .vbs
-
Microsoft Activation Scripts 1.8/Separate-Files-Version/Troubleshoot.cmd.cmd .vbs
-
Microsoft Activation Scripts 1.8/Separate-Files-Version/_ReadMe.html.html