Overview

overview

7

Static

static

7

HEU-KMS-Ac....0.exe

windows7-x64

7

HEU-KMS-Ac....0.exe

windows10-2004-x64

7

HEU-KMS-Ac...��.url

windows7-x64

1

HEU-KMS-Ac...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    359728ba1653677aa383eaf22fe00e7cf925905052b04d926d46cff4e35922ed

  • Size

    4.3MB

  • MD5

    ae46c4b66300938eb47dc3b787b63f2e

  • SHA1

    df37e113dd5ab390c8ba6b1e65f62983867cdc87

  • SHA256

    359728ba1653677aa383eaf22fe00e7cf925905052b04d926d46cff4e35922ed

  • SHA512

    be24686ac7751c7fe3f41f900fed968fbbe7e750bbcff9f8ad484a67ee536f2d8074d33b857dd6283f29fdae057cf2b02a69d94916f2c5206f16e7cca12fbe6d

  • SSDEEP

    98304:QXdDm2BWmkAC3cb1NxtUsDOds/vmGplYL6ahuGckEf:QtiuWmkcbjxtvDZXmOlYGaQdku

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 359728ba1653677aa383eaf22fe00e7cf925905052b04d926d46cff4e35922ed
    .zip
  • HEU-KMS-Activator-v30.2.0/HEU3020_Debug.txt
  • HEU-KMS-Activator-v30.2.0/HEU_KMS_Activator_30.2.0.exe
    .exe windows:5 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86


    Headers

    Sections

  • HEU-KMS-Activator-v30.2.0/IT技术之家.url