Analysis
-
max time kernel
171s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
07/11/2023, 13:41
General
-
Target
KMS 360 Pro - Portable.exe
-
Size
36.8MB
-
MD5
9205de4d5675a029ac637ea085e63004
-
SHA1
da3068f9fc9758c5432a433ea45a630241171912
-
SHA256
f5dff9fd21c0217b96c4a862fd10d751ab89288a4ae2150dbd1a4e22bb929af8
-
SHA512
b5136067de412e8636308c8776b8aefb9daead5b9576bd52c29cd8543c1ff057337dfbd1675cbeab933c1aa90399c8dd82ed81459c0f9b8b9023dfca02b4f9a8
-
SSDEEP
393216:FuHgV5HLNDFBPsY4XBDszxkqWAOfraPJZEnEwNo8h7ILw:FuK5HlFNGBDszaqWAOfraPJZ0EwSGIL
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of FindShellTrayWindow 18 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\KMS 360 Pro - Portable.exe"C:\Users\Admin\AppData\Local\Temp\KMS 360 Pro - Portable.exe"1⤵
- Checks computer location settings
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12B
MD5e4a1661c2c886ebb688dec494532431c
SHA1a2ae2a7db83b33dc95396607258f553114c9183c
SHA256b76875c50ef704dbbf7f02c982445971d1bbd61aebe2e4b28ddc58a1d66317d5
SHA512efdcb76fb40482bc94e37eae3701e844bf22c7d74d53aef93ac7b6ae1c1094ba2f853875d2c66a49a7075ea8c69f5a348b786d6ee0fa711669279d04adaac22c
-
Filesize
3.4MB
-
Filesize
360KB
-
Filesize
10.8MB
-
Filesize
8.9MB
-
Filesize
6.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4.7MB
-
Filesize
5.4MB
-
Filesize
36.8MB
-
Filesize
224KB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB