Overview

overview

7

Static

static

7

HEU_KMS_Ac...on.exe

windows7-x64

7

HEU_KMS_Ac...on.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    8efc927f9b169fb0e324859fa6acc07bc5c78f8799bd0f0ca1af56781a2f9791

  • Size

    4.6MB

  • MD5

    02ec7268ffd89b125007d8c1585b6910

  • SHA1

    84acecfc7cc7c4c0dbdfe9deaefa09da8284af26

  • SHA256

    8efc927f9b169fb0e324859fa6acc07bc5c78f8799bd0f0ca1af56781a2f9791

  • SHA512

    e51e1a63ba508261303b690a1bffb1f37831f4adef54b73ca1a1be6e7bae387e3b06bb6c9d6e175ed4a08e7777d928e573cc39e9380a109748e77e10982afc9c

  • SSDEEP

    98304:5fERcbdpUl76Okucn2luQXSNQzg95wGZPA9WeiKk+OBbne:rbdpUl3kusGriNDfw8PAkeVnOVe

Score
7/10
qrlinkupx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • One or more HTTP URLs in qr code identified

    Detects presence of HTTP links in QR codes.

    qrlink
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 8efc927f9b169fb0e324859fa6acc07bc5c78f8799bd0f0ca1af56781a2f9791
    .zip
  • HEU_KMS_Activator_Dragon/HEU_KMS_Activator_Dragon.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • HEU_KMS_Activator_Dragon/不迷路资源库（PC软件安装为主）.jpg
    .jpg

    • http://weixin.qq.com/r/_xCxqe3EUrAtranK90Xp

  • HEU_KMS_Activator_Dragon/免责声明.txt
  • HEU_KMS_Activator_Dragon/小不迷路资源库（PC软件工具与安卓软件为主）.jpg
    .jpg

    • http://weixin.qq.com/r/PhHD2ybElnvprWK490Qs

  • HEU_KMS_Activator_Dragon/打赏支持.jpg
    .jpg
  • HEU_KMS_Activator_Dragon/更新日志.txt