Overview
overview
4Static
static
1Windows-Ac...1E.cmd
windows7-x64
4Windows-Ac...1E.cmd
windows10-2004-x64
4Windows-Ac...on.cmd
windows7-x64
4Windows-Ac...on.cmd
windows10-2004-x64
4Windows-Ac...on.cmd
windows7-x64
4Windows-Ac...on.cmd
windows10-2004-x64
4Windows-Ac...IO.cmd
windows7-x64
4Windows-Ac...IO.cmd
windows10-2004-x64
4Windows-Ac...on.cmd
windows7-x64
4Windows-Ac...on.cmd
windows10-2004-x64
4Windows-Ac...on.cmd
windows7-x64
4Windows-Ac...on.cmd
windows10-2004-x64
4Windows-Ac...bs.cmd
windows7-x64
1Windows-Ac...bs.cmd
windows10-2004-x64
1Windows-Ac...mi.cmd
windows7-x64
4Windows-Ac...mi.cmd
windows10-2004-x64
4Windows-Ac...er.cmd
windows7-x64
4Windows-Ac...er.cmd
windows10-2004-x64
4Windows-Ac...ot.cmd
windows7-x64
4Windows-Ac...ot.cmd
windows10-2004-x64
4Windows-Ac...e.html
windows7-x64
3Windows-Ac...e.html
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/All-In-One-Version/MAS_AIO-CRC32_31F7FD1E.cmd
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/All-In-One-Version/MAS_AIO-CRC32_31F7FD1E.cmd
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Activators/HWID_Activation.cmd
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Activators/HWID_Activation.cmd
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Activators/KMS38_Activation.cmd
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Activators/KMS38_Activation.cmd
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Activators/Ohook_Activation_AIO.cmd
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Activators/Ohook_Activation_AIO.cmd
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Activators/Online_KMS_Activation.cmd
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Activators/Online_KMS_Activation.cmd
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Change_Edition.cmd
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Change_Edition.cmd
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Check-Activation-Status-vbs.cmd
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Check-Activation-Status-vbs.cmd
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Check-Activation-Status-wmi.cmd
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Check-Activation-Status-wmi.cmd
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Extract_OEM_Folder.cmd
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Extract_OEM_Folder.cmd
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Troubleshoot.cmd
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Troubleshoot.cmd
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/_ReadMe.html
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/_ReadMe.html
Resource
win10v2004-20240704-en
General
-
Target
Windows-Activator-SyntaxServices.rar
-
Size
244KB
-
MD5
a60f1e65154f0523cfa307d8cb8090be
-
SHA1
42ec61f8499a44848215cda3549d80aa5e2b010b
-
SHA256
408d69cc08e159b7f34fc7124b7ddc599a07bc2df9323fa43cf7e13369dabb55
-
SHA512
c452c14c6b963bcf778376559c00a95a4d312f27774312965039af827e5606268d80f0d05dcf0162ef9845d1636581ab2e78db02cd64a20202d2af42853546c6
-
SSDEEP
6144:/6nkkVzCsh3sgaunL+KHGhV70jmQAN5LqMmC/UTYW96QC3:/ZkNX3sgas+KHGIATL1cZ6j
Malware Config
Signatures
Files
-
Windows-Activator-SyntaxServices.rar.rar
-
Windows-Activator-SyntaxServices/Microsoft-Activator/LICENSE
-
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/All-In-One-Version/MAS_AIO-CRC32_31F7FD1E.cmd.cmd .vbs
-
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Activators/HWID_Activation.cmd.cmd .vbs
-
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Activators/KMS38_Activation.cmd.cmd .vbs
-
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Activators/Ohook_Activation_AIO.cmd.cmd .vbs
-
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Activators/Online_KMS_Activation.cmd.cmd .vbs
-
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Activators/ReadMe.txt
-
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Change_Edition.cmd.cmd .ps1
-
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Check-Activation-Status-vbs.cmd.cmd .vbs
-
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Check-Activation-Status-wmi.cmd.cmd .vbs
-
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Extract_OEM_Folder.cmd.cmd .vbs
-
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/Troubleshoot.cmd.cmd .vbs
-
Windows-Activator-SyntaxServices/Microsoft-Activator/MAS/Separate-Files-Version/_ReadMe.html.html
-
Windows-Activator-SyntaxServices/Microsoft-Activator/Readme Instructions.txt