Overview

overview

7

Static

static

7

HEU_KMS_Ac...��.url

windows7-x64

1

HEU_KMS_Ac...��.url

windows10-2004-x64

1

HEU_KMS_Ac....0.exe

windows7-x64

7

HEU_KMS_Ac....0.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b7d76485df97e2bd1a346c691f26e7a1e0d8aa7c38dead7378870ab9dd665fb6

  • Size

    4.3MB

  • MD5

    791244f4d30d502bc4e66e23d2765ab2

  • SHA1

    76b8428c939d313018d13622c0436de025e07f02

  • SHA256

    b7d76485df97e2bd1a346c691f26e7a1e0d8aa7c38dead7378870ab9dd665fb6

  • SHA512

    4e5a5a113e0b38a89b513df3709359ae3d5ff94a73c792be18d9596d8cb6c1b40a1f5c85e6ac6a858d1d7448b24206583b8e4d36324599c3648ff6f53a28c87c

  • SSDEEP

    98304:FkCoG/s4kn73Uh1gwrUt86mY/HuABbNoeFATWfdMGNvQVqIye6K+v:FkCoG/sc1YyY/JntFXFMivQEI3V+v

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b7d76485df97e2bd1a346c691f26e7a1e0d8aa7c38dead7378870ab9dd665fb6
    .zip
  • HEU_KMS_Activator_v30.4.0/!关注微信 - 更多福利.png
    .png
  • HEU_KMS_Activator_v30.4.0/!果核剥壳 - 全网更新最快.url
    .url
  • HEU_KMS_Activator_v30.4.0/HEU_KMS_Activator_30.4.0.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections