6650dcf52e02ab0459c72bf9bdbdeaa1c3748be49c4a45d04ebb18fae16baa01

Submit
Reports

Overview

overview

Static

static

All-In-One...76.cmd

windows7-x64

All-In-One...76.cmd

windows10-2004-x64

ReadMe.html

windows7-x64

ReadMe.html

windows10-2004-x64

Separate-F...y.html

windows7-x64

Separate-F...y.html

windows10-2004-x64

Separate-F...bs.cmd

windows7-x64

Separate-F...bs.cmd

windows10-2004-x64

Separate-F...Up.exe

windows10-2004-x64

Separate-F...o.html

windows7-x64

Separate-F...o.html

windows10-2004-x64

Separate-F...te.exe

windows7-x64

Separate-F...te.exe

windows10-2004-x64

Separate-F...lc.dll

windows7-x64

Separate-F...lc.dll

windows10-2004-x64

Separate-F...te.exe

windows10-2004-x64

Separate-F...lc.dll

windows7-x64

Separate-F...lc.dll

windows10-2004-x64

Separate-F...on.cmd

windows7-x64

Separate-F...on.cmd

windows10-2004-x64

Separate-F...on.cmd

windows7-x64

Separate-F...on.cmd

windows10-2004-x64

Separate-F...D.html

windows7-x64

Separate-F...D.html

windows10-2004-x64

Separate-F...8.html

windows7-x64

Separate-F...8.html

windows10-2004-x64

Separate-F...te.cmd

windows7-x64

Separate-F...te.cmd

windows10-2004-x64

Separate-F...o.html

windows7-x64

Separate-F...o.html

windows10-2004-x64

Separate-F...64.exe

windows7-x64

Separate-F...64.exe

windows10-2004-x64

Analysis

max time kernel
142s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
25/11/2023, 06:58

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

All-In-One-Version/MAS_1.5_AIO_CRC32_21D20776.cmd

Resource

win7-20231023-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

All-In-One-Version/MAS_1.5_AIO_CRC32_21D20776.cmd

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral3

Sample

ReadMe.html

Resource

win7-20231023-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral4

Sample

ReadMe.html

Resource

win10v2004-20231020-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral5

Sample

Separate-Files-Version/Activators/Activations_Summary.html

Resource

win7-20231023-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

Separate-Files-Version/Activators/Activations_Summary.html

Resource

win10v2004-20231020-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral7

Sample

Separate-Files-Version/Activators/Check-Activation-Status-vbs.cmd

Resource

win7-20231023-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

Separate-Files-Version/Activators/Check-Activation-Status-vbs.cmd

Resource

win10v2004-20231025-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Separate-Files-Version/Activators/HWID-KMS38_Activation/BIN/ClipUp.exe

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Separate-Files-Version/Activators/HWID-KMS38_Activation/BIN/_Info.html

Resource

win7-20231023-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral11

Sample

Separate-Files-Version/Activators/HWID-KMS38_Activation/BIN/_Info.html

Resource

win10v2004-20231023-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

Separate-Files-Version/Activators/HWID-KMS38_Activation/BIN/arm64_gatherosstate.exe

Resource

win7-20231020-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Separate-Files-Version/Activators/HWID-KMS38_Activation/BIN/arm64_gatherosstate.exe

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Separate-Files-Version/Activators/HWID-KMS38_Activation/BIN/arm64_slc.dll

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Separate-Files-Version/Activators/HWID-KMS38_Activation/BIN/arm64_slc.dll

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Separate-Files-Version/Activators/HWID-KMS38_Activation/BIN/gatherosstate.exe

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

Separate-Files-Version/Activators/HWID-KMS38_Activation/BIN/slc.dll

Resource

win7-20231025-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

Separate-Files-Version/Activators/HWID-KMS38_Activation/BIN/slc.dll

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

Separate-Files-Version/Activators/HWID-KMS38_Activation/HWID_Activation.cmd

Resource

win7-20231023-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

Separate-Files-Version/Activators/HWID-KMS38_Activation/HWID_Activation.cmd

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

Separate-Files-Version/Activators/HWID-KMS38_Activation/KMS38_Activation.cmd

Resource

win7-20231020-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

Separate-Files-Version/Activators/HWID-KMS38_Activation/KMS38_Activation.cmd

Resource

win10v2004-20231025-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

Separate-Files-Version/Activators/HWID-KMS38_Activation/ReadMe_HWID.html

Resource

win7-20231020-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral24

Sample

Separate-Files-Version/Activators/HWID-KMS38_Activation/ReadMe_HWID.html

Resource

win10v2004-20231023-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral25

Sample

Separate-Files-Version/Activators/HWID-KMS38_Activation/ReadMe_KMS38.html

Resource

win7-20231020-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral26

Sample

Separate-Files-Version/Activators/HWID-KMS38_Activation/ReadMe_KMS38.html

Resource

win10v2004-20231023-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral27

Sample

Separate-Files-Version/Activators/Online_KMS_Activation/Activate.cmd

Resource

win7-20231020-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

Separate-Files-Version/Activators/Online_KMS_Activation/Activate.cmd

Resource

win10v2004-20231023-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

Separate-Files-Version/Activators/Online_KMS_Activation/BIN/_Info.html

Resource

win7-20231020-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral30

Sample

Separate-Files-Version/Activators/Online_KMS_Activation/BIN/_Info.html

Resource

win10v2004-20231023-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral31

Sample

Separate-Files-Version/Activators/Online_KMS_Activation/BIN/cleanosppx64.exe

Resource

win7-20231023-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Separate-Files-Version/Activators/Online_KMS_Activation/BIN/cleanosppx64.exe

Resource

win10v2004-20231020-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

Separate-Files-Version/Activators/Online_KMS_Activation/BIN/cleanosppx64.exe
Size

19KB
MD5

162ab955cb2f002a73c1530aa796477f
SHA1

d30a0e4e5911d3ca705617d17225372731c770e2
SHA256

5ce462e5f34065fc878362ba58617fab28c22d631b9d836dddcf43fb1ad4de6e
SHA512

e0288dcf78092449d9cbaef4488041131925387c1aedc9e9512da0f66efe2fb68350ca3937f6715834e62e7c931c5dad0fc8bc3c6c0c3daedeff356d6feaac2e
SSDEEP

384:gQAInWKpEFFzpjq37oIOU6GHq33QPiu431VP:gxWTpOFagUb2qiu43P

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\Separate-Files-Version\Activators\Online_KMS_Activation\BIN\cleanosppx64.exe
"C:\Users\Admin\AppData\Local\Temp\Separate-Files-Version\Activators\Online_KMS_Activation\BIN\cleanosppx64.exe"
1⤵
PID:4264

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads