General
- Target microKMS_v19.01.03.exe
- Size 805KB
- Sample260625-hfqs8aas9j
- SHA256 da9503e27cddce64c271b6c94d6c37f8996db7cc938eefd42f36b06bc0d9597f
- MD5 63126cbceb38700ed8d8b95a88bc88ee
- SHA1 776f02c82ed0a814e5a342fd2ab38d206ba9afcb
- SHA512 37c2d7a17c1ba82f40baca0f5372a9996f530beb5a7b614480ff812d900b541ed05c109022f25f4ab6a49d5e92b8fd6aac4068e95c6f1fb2a92526e19f132dc2
- SSDEEP 3072:1+JZ/FdHbd4wYeOsK9i7AROnMVE/GpYT0WyvStvStvStvStvStvSRigj+sBouJuG:qfclvsvsvsvsvsvOigguJutvXM
- TLSH T11E0509787A40F602C16DC93609E4D67906A97F3A2822D7427CD37F4F36F5B426B84E0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
microKMS_v19.01.03.exe
Resource
win10ltsc2021-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
microKMS_v19.01.03.exe
Resource
win11ltsc2024-20260617-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target microKMS_v19.01.03.exe
- Size 805KB
- SHA256 da9503e27cddce64c271b6c94d6c37f8996db7cc938eefd42f36b06bc0d9597f
- MD5 63126cbceb38700ed8d8b95a88bc88ee
- SHA1 776f02c82ed0a814e5a342fd2ab38d206ba9afcb
- SHA512 37c2d7a17c1ba82f40baca0f5372a9996f530beb5a7b614480ff812d900b541ed05c109022f25f4ab6a49d5e92b8fd6aac4068e95c6f1fb2a92526e19f132dc2
- SSDEEP 3072:1+JZ/FdHbd4wYeOsK9i7AROnMVE/GpYT0WyvStvStvStvStvStvSRigj+sBouJuG:qfclvsvsvsvsvsvOigguJutvXM
- TLSH T11E0509787A40F602C16DC93609E4D67906A97F3A2822D7427CD37F4F36F5B426B84E0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory