Overview

overview

7

Static

static

5

mini-KMS_A...NG.exe

windows7-x64

7

mini-KMS_A...NG.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    15232b8fb355080763d355a5c75e117b_JaffaCakes118

  • Size

    1003KB

  • Sample

    241004-2cq5csthmf

  • MD5

    15232b8fb355080763d355a5c75e117b

  • SHA1

    e680967b1ccb1ee4e5f700e1ee35c573fca76c6d

  • SHA256

    e60d799e17e5037920d824c89e6020877784f2fd4b0b05940bab381471e237fa

  • SHA512

    7514235e560589b2987efb6c3d4feaa49876461232535262c8cd2720fa8ab91faf5a9d38fc633553656ddcfedd37d17d901e14b936b5900d45619846b56acd3c

  • SSDEEP

    24576:Hf1yuHt9a4vqJEPAnTp6eL+PZJoqe0KiEimTd:H9RN9a02rYJomyimTd

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      mini-KMS_Activator_v1.3_Office2010_VL_ENG.exe

    • Size

      1018KB

    • MD5

      be7563a984dc5168ce14181b90432859

    • SHA1

      b98280f7310095da26de3e448beb489998f74c54

    • SHA256

      e9045c4012cdfd4f2911db303478527e2006aa3b148dfdbacae85b4ee3b52e5e

    • SHA512

      363339b8c932c69473ae34daad38fb0f86979a6173a2ca570b28a767251299af97c81376a2b1c41f2eeabe86e6933a332f9c891d9eb2ba4893910fee1c6d3f12

    • SSDEEP

      24576:kF8B9/XCfoX5IgBIeepfBLwtQVReC5Tt9T:I8j+g+XZd5TtN

    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks