General
-
Target
KMSpico_Install_v.11.2.rar
-
Size
4.5MB
-
Sample
230828-d2pqtshb41
-
MD5
901e6c3bedc63a611e6fefc4b52638d4
-
SHA1
e8f1d39ecc73078d85431bfb10d4ede7113afe51
-
SHA256
d5a654106a9841fa3845b894a7879e6e73161a0c785ac73ad775737dfe11237f
-
SHA512
b52a57b7d3ee9d2a25e2f323647ea56b0aecc2b23597d84c523a1c976fb571f34081eec5ed0423443b38c94bc56861b556e20be31b915f322750fbab2e44a697
-
SSDEEP
98304:b7zCLYdsM1uBemsPgJ4KKSUyUS8TNe16FxAcMhuNJI/w1gytiSV:PzCLguwLP4bU1LTNiCXMoNJI/w1goFV
Static task
static1
Behavioral task
behavioral1
Sample
EnableActivationConfig.reg
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
EnableActivationConfig.reg
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
KMSpico.rar
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
KMSpico.rar
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
NET_Framework45_Full_setup.exe
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
NET_Framework45_Full_setup.exe
Resource
win10v2004-20230703-en
Malware Config
Targets
-
-
Target
EnableActivationConfig.reg
-
Size
8KB
-
MD5
b26e182f4d4445eca4f15de21544e16b
-
SHA1
7c44c3efbf8a85ebd74e5d0ae10f91c3d5950fd6
-
SHA256
108b8488e9118be23946865b08016115f3faf706dca35e6411aacdec67e29f24
-
SHA512
cf8752f5d0fa7703efdb3d77ec419843ae093a3a89a0f4fee9c10e4c131986c7f92710217a860fb5629221cef86206a09bb6e3340859cad15c1675ed15623f7b
-
SSDEEP
96:gVH2HQyQYZmBSxChCYhRUvCC98nGuMt976UYUz0+IXePGEp2j93USfbvVK8IXI/z:+yQ7BUaJL888c193UIpt5
-
Modifies security service
-
-
-
Target
KMSpico.rar
-
Size
3.6MB
-
MD5
7e5feda84e0420546e5741334c98e5af
-
SHA1
557106a12926c4898f59dd7e39663f3b5fafc313
-
SHA256
2a213313c073e2003e8c5c2bcbfc7a06fec960ed286cc59b4054b9899bda52cf
-
SHA512
4e11536eafc8cfd4c0953414cd9a09993733d403e1a9370e3f9bf9db224c225d6c5c1c50e593366f79deac8c9f7db63e06fdf3fc6999536e124826091009e8b5
-
SSDEEP
98304:F7zCLYdsM1uBemsPgJ4KKSUyUS8TNe16FxAcMhc:lzCLguwLP4bU1LTNiCXMq
Score3/10 -
-
-
Target
NET_Framework45_Full_setup.exe
-
Size
982KB
-
MD5
9e8253f0a993e53b4809dbd74b335227
-
SHA1
f6ba6f03c65c3996a258f58324a917463b2d6ff4
-
SHA256
e434828818f81e6e1f5955e84caec08662bd154a80b24a71a2eda530d8b2f66a
-
SHA512
404d67d59fcd767e65d86395b38d1a531465cee5bb3c5cf3d1205975ff76d27d477fe8cc3842b8134f17b61292d8e2ffba71134fe50a36afd60b189b027f5af0
-
SSDEEP
24576:3idS2cRQNb9dUcyezFSja7zEwA2BH6SEUVGDKX68zuQm6wwr5mAPepC:SQ2cRQh9GexmCxBxVV56CmWQax
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
3Windows Service
3