General
- Target WindowsActivator.exe
- Size 105.5MB
- Sample260626-trtvsscy2t
- SHA256 36d4559df893a0264f0cf57c8eddbb13d7e0a982ac353472de529041fb072129
- MD5 40e1f66c480683727c404b9ed78736d6
- SHA1 eac8f8b4e8f3da74d5e0fe8532823c888015bb00
- SHA512 6fec12d9326dd4dfaadad5b8cdc5bafc6b2d85e51eeedee97c875fad76484600e67f8afb3b560e7fe17ed6d62d37b25a5f6242b67d9f90ac54f67e081b1f403e
- SSDEEP 1572864:7qrTIAikXJVrvo2pUg9NoX0Rpqdw+vWlM9ojCrD4WWJvKSc/JUNnzPhOOThF+r45:upv7ig9NX4BelKbDSc/iFzLF7g
- TLSH T13B3833906F00D587E4ED923A96D0CE15A87768AA7AC29BD713F0017A1CBB3C4487DF67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
WindowsActivator.exe
Resource
win11-20260513-en
7 signatures
900 seconds
Malware Config
Targets
-
- Target WindowsActivator.exe
- Size 105.5MB
- SHA256 36d4559df893a0264f0cf57c8eddbb13d7e0a982ac353472de529041fb072129
- MD5 40e1f66c480683727c404b9ed78736d6
- SHA1 eac8f8b4e8f3da74d5e0fe8532823c888015bb00
- SHA512 6fec12d9326dd4dfaadad5b8cdc5bafc6b2d85e51eeedee97c875fad76484600e67f8afb3b560e7fe17ed6d62d37b25a5f6242b67d9f90ac54f67e081b1f403e
- SSDEEP 1572864:7qrTIAikXJVrvo2pUg9NoX0Rpqdw+vWlM9ojCrD4WWJvKSc/JUNnzPhOOThF+r45:upv7ig9NX4BelKbDSc/iFzLF7g
- TLSH T13B3833906F00D587E4ED923A96D0CE15A87768AA7AC29BD713F0017A1CBB3C4487DF67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables Task Manager via registry modification
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application