General

  • Target

    KMS_VL_ALL-master.zip

  • Size

    175KB

  • MD5

    8a848b909d3c248599a1c7ff87e218f9

  • SHA1

    25ab3cfee6ede8b191773e23c50b63098eedd0ac

  • SHA256

    b6c178c80442479e58c38e3d987efe6bfd2be5b3c8c05aa3c3e91106a57f6066

  • SHA512

    4c49494851a72c7ec460e8c30241295778c50c544de5d22f70c89b5db176ea311532bf127bc3e424e5b107b72de52c67b8938ddbfae84f9877442130dacecfba

  • SSDEEP

    3072:HkdEXEAMRzZkXRfAhEPdjCS+ZazdvNPqsayDDLvkS7QEAMMz6kXRfS:HgJA7BiwdjFPda2fvRzAzB6

Score
3/10

Malware Config

Signatures

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • KMS_VL_ALL-master.zip
    .zip
  • KMS_VL_ALL-master/$OEM$/$$/Setup/Scripts/bin/A64.dll
  • KMS_VL_ALL-master/$OEM$/$$/Setup/Scripts/bin/SvcTrigger.xml
  • KMS_VL_ALL-master/$OEM$/$$/Setup/Scripts/bin/cleanosppx64.exe
    .exe windows x64

    3e0977438b3a99ae7d9af893f9538893


    Headers

    Imports

    Sections

  • KMS_VL_ALL-master/$OEM$/$$/Setup/Scripts/bin/cleanosppx86.exe
    .exe windows x86

    0393153f08fe5c66b5966a4f45bd77d4


    Headers

    Imports

    Sections

  • KMS_VL_ALL-master/$OEM$/$$/Setup/Scripts/bin/x64.dll
    .dll windows x64

    09aa7a1a68855623e3ac071d6080ef31


    Headers

    Imports

    Sections

  • KMS_VL_ALL-master/$OEM$/$$/Setup/Scripts/bin/x86.dll
    .dll windows x86

    8a7f219820c2adf212c4edf3841eebff


    Headers

    Imports

    Sections

  • KMS_VL_ALL-master/$OEM$/$$/Setup/Scripts/setupcomplete.cmd
    .cmd .vbs
  • KMS_VL_ALL-master/Activate.cmd
    .cmd .vbs
  • KMS_VL_ALL-master/AutoRenewal-Setup.cmd
    .cmd .vbs
  • KMS_VL_ALL-master/Check-Activation-Status-vbs.cmd
    .cmd .vbs
  • KMS_VL_ALL-master/Check-Activation-Status-wmic.cmd
    .cmd .vbs
  • KMS_VL_ALL-master/README.md
  • KMS_VL_ALL-master/ReadMe.html
  • KMS_VL_ALL-master/bin/A64.dll
  • KMS_VL_ALL-master/bin/SvcTrigger.xml
  • KMS_VL_ALL-master/bin/cleanosppx64.exe
    .exe windows x64

    3e0977438b3a99ae7d9af893f9538893


    Headers

    Imports

    Sections

  • KMS_VL_ALL-master/bin/cleanosppx86.exe
    .exe windows x86

    0393153f08fe5c66b5966a4f45bd77d4


    Headers

    Imports

    Sections

  • KMS_VL_ALL-master/bin/x64.dll
    .dll windows x64

    09aa7a1a68855623e3ac071d6080ef31


    Headers

    Imports

    Sections

  • KMS_VL_ALL-master/bin/x86.dll
    .dll windows x86

    8a7f219820c2adf212c4edf3841eebff


    Headers

    Imports

    Sections