General

  • Target

    Ratiborus KMS Tools 15.12.2022.7z

  • Size

    81.3MB

  • MD5

    f1d4361a9310e49482c7bd5396f7538a

  • SHA1

    9a22957ead35a385773be243d3c4b2e6047fbd69

  • SHA256

    7ace4c30c6faeaad40d1b4e885217e3c8f8f973a95d7e591b47936ff5781b585

  • SHA512

    ab398c23c523cdb38ca303c27d780eaf4e40de708c57d74543c20e6b312a1399cbd2a23c5d713c54375260644effd9ed958b8a3f5764eefb2db360ad3d52e341

  • SSDEEP

    1572864:7kvcHUl6n6MBZelECkgg1/h3B8vbkOPo2Wleja01UUTiyaBVbYBPexl+/6yiYjJF:7kvFw6blRk/1/zEue2014PsBWaOYr

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • Ratiborus KMS Tools 15.12.2022.7z
    .7z
  • Add_Defender_Exclusion.cmd
  • KMS Tools Portable.chm
    .chm
  • KMSTools.exe
    .exe windows:4 windows x86 arch:x86

    3236d21132d9b91a1c267e5fd4d3b633


    Code Sign

    Headers

    Imports

    Sections

  • Programs/KMSTools.ini
  • Programs/Office 2013-2021 C2R Install v7.5.0/OInstall.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Programs/Office 2013-2021 C2R Install v7.5.0/OInstallLite.exe
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Programs/Office 2013-2021 C2R Install v7.5.0/files/Configure.xml
  • Programs/Office 2013-2021 C2R Install v7.5.0/files/Uninstall.xml
  • Programs/Office 2013-2021 C2R Install v7.5.0/files/x64/cleanospp.exe
    .exe windows:6 windows x64 arch:x64

    3e0977438b3a99ae7d9af893f9538893


    Headers

    Imports

    Sections

  • Programs/Office 2013-2021 C2R Install v7.5.0/files/x64/msvcr100.dll
    .dll windows:5 windows x64 arch:x64

    1208bcdc77cffee6a6813646321cfc79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Programs/Office 2013-2021 C2R Install v7.5.0/files/x86/cleanospp.exe
    .exe windows:6 windows x86 arch:x86

    0393153f08fe5c66b5966a4f45bd77d4


    Headers

    Imports

    Sections

  • Programs/Office 2013-2021 C2R Install v7.5.0/files/x86/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Programs/Office 2013-2021 C2R Install v7.5.0/readme_en.txt
  • Programs/Office 2013-2021 C2R Install v7.5.0/readme_ru.txt
  • readme.txt