Overview

overview

8

Static

static

3

KMS_VL_ALL...64.dll

windows7-x64

1

KMS_VL_ALL...64.dll

windows10-2004-x64

1

KMS_VL_ALL...ce.ps1

windows7-x64

1

KMS_VL_ALL...ce.ps1

windows10-2004-x64

1

KMS_VL_ALL...64.dll

windows7-x64

1

KMS_VL_ALL...64.dll

windows10-2004-x64

1

KMS_VL_ALL...86.dll

windows7-x64

1

KMS_VL_ALL...86.dll

windows10-2004-x64

1

KMS_VL_ALL...rm.ps1

windows7-x64

1

KMS_VL_ALL...rm.ps1

windows10-2004-x64

1

KMS_VL_ALL...te.cmd

windows7-x64

8

KMS_VL_ALL...te.cmd

windows10-2004-x64

8

KMS_VL_ALL...te.cmd

windows7-x64

8

KMS_VL_ALL...te.cmd

windows10-2004-x64

8

KMS_VL_ALL...bs.cmd

windows7-x64

1

KMS_VL_ALL...bs.cmd

windows10-2004-x64

1

KMS_VL_ALL...e.html

windows7-x64

1

KMS_VL_ALL...e.html

windows10-2004-x64

1

KMS_VL_ALL...64.dll

windows7-x64

1

KMS_VL_ALL...64.dll

windows10-2004-x64

1

KMS_VL_ALL...ce.ps1

windows7-x64

1

KMS_VL_ALL...ce.ps1

windows10-2004-x64

1

KMS_VL_ALL...64.dll

windows7-x64

1

KMS_VL_ALL...64.dll

windows10-2004-x64

1

KMS_VL_ALL...86.dll

windows7-x64

1

KMS_VL_ALL...86.dll

windows10-2004-x64

1

KMS_VL_ALL...rm.ps1

windows7-x64

1

KMS_VL_ALL...rm.ps1

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    57462a9d49d4cffd9f71ff57963a03f136fec301754222b876604b96d26f5739

  • Size

    141KB

  • MD5

    6aeb9e3cc8aa876afd4adbd8c9afdf53

  • SHA1

    f3d458012dbc9ebff20f57940e75de70a75cf604

  • SHA256

    57462a9d49d4cffd9f71ff57963a03f136fec301754222b876604b96d26f5739

  • SHA512

    d8d49cf5f6caedcb507b45da2cbf651f4cabec0c64f3ff1cce9eec3b288a450671f34d047e8e28e1b54f07b101cff1cd6863e3071ba3029875f4eebf11bac864

  • SSDEEP

    3072:SrXVh87JcImhCWYlLBhPrXVu88GcKetjH8A:SrXVq7JcFCjlFlrXVJ8GchtIA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 57462a9d49d4cffd9f71ff57963a03f136fec301754222b876604b96d26f5739
    .rar
  • KMS_VL_ALL-51/$OEM$/$$/Setup/Scripts/bin/A64.dll
  • KMS_VL_ALL-51/$OEM$/$$/Setup/Scripts/bin/CleanOffice.txt
    .ps1
  • KMS_VL_ALL-51/$OEM$/$$/Setup/Scripts/bin/SvcTrigger.xml
  • KMS_VL_ALL-51/$OEM$/$$/Setup/Scripts/bin/x64.dll
    .dll windows:6 windows x64 arch:x64

    09aa7a1a68855623e3ac071d6080ef31


    Headers

    Imports

    Sections

  • KMS_VL_ALL-51/$OEM$/$$/Setup/Scripts/bin/x86.dll
    .dll windows:6 windows x86 arch:x86

    8a7f219820c2adf212c4edf3841eebff


    Headers

    Imports

    Sections

  • KMS_VL_ALL-51/$OEM$/$$/Setup/Scripts/bin/xrm.txt
    .ps1
  • KMS_VL_ALL-51/$OEM$/$$/Setup/Scripts/setupcomplete.cmd
    .cmd .vbs
  • KMS_VL_ALL-51/Activate.cmd
    .cmd .vbs
  • KMS_VL_ALL-51/AutoRenewal-Setup.cmd
    .wsf .vbs polyglot
  • KMS_VL_ALL-51/Check-Activation-Status-vbs.cmd
    .cmd .vbs
  • KMS_VL_ALL-51/Check-Activation-Status-wmi.cmd
    .wsf .vbs polyglot
  • KMS_VL_ALL-51/ReadMe.html
  • KMS_VL_ALL-51/bin/A64.dll
  • KMS_VL_ALL-51/bin/CleanOffice.txt
    .ps1
  • KMS_VL_ALL-51/bin/SvcTrigger.xml
  • KMS_VL_ALL-51/bin/x64.dll
    .dll windows:6 windows x64 arch:x64

    09aa7a1a68855623e3ac071d6080ef31


    Headers

    Imports

    Sections

  • KMS_VL_ALL-51/bin/x86.dll
    .dll windows:6 windows x86 arch:x86

    8a7f219820c2adf212c4edf3841eebff


    Headers

    Imports

    Sections

  • KMS_VL_ALL-51/bin/xrm.txt
    .ps1