General

  • Target

    b8451a98a76779c0a4fe59a79d3dd7d0f840f1f2d24e0b61b2fb55cc336cfee7

  • Size

    4.3MB

  • MD5

    52abb9f998b09a4cf812556d88aef9ed

  • SHA1

    3332fcd0f28a6c1d1079d2b856d251af346baba1

  • SHA256

    b8451a98a76779c0a4fe59a79d3dd7d0f840f1f2d24e0b61b2fb55cc336cfee7

  • SHA512

    55f67ca993226595894ed18c770bfb6b4a162a179d7ab2572f8e5e8a1d5311157939db53922ce185c4c8fcd7592939aade2d2eb4994c256720605353442f6d63

  • SSDEEP

    98304:5+yl9ZEeFvEd4vdQQ0s+I1YNX8MtY8w8lebnViw2V52:kVKv84vB0s+I1QfC8wjbnkw2V0

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b8451a98a76779c0a4fe59a79d3dd7d0f840f1f2d24e0b61b2fb55cc336cfee7
    .rar
  • HEU_KMS_Activator_v42.1.0.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • 使用方法.txt