Overview

overview

9

Static

static

9

kmstool.safe.exe

windows10-2004-x64

9

kmstool.safe.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    kmstool.safe.decrypted
  • Size 20.0MB
  • Sample260703-sgbe2agv8r
  • SHA256 3b1a9a9d7be1d036b2c80bacf069b518ac92b4a05a797afde8736a3238cbbd63
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
discovery

Malware Config

Targets

    • Target
      kmstool.safe.decrypted
    • Size 20.0MB
    • SHA256 3b1a9a9d7be1d036b2c80bacf069b518ac92b4a05a797afde8736a3238cbbd63
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    discovery

    • Detected Nirsoft tools

      Free utilities often used by attackers which can steal passwords, product keys, etc.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks