General

  • Target
    KMS_VL_ALL_AIO_v45.cmd
  • Size 294KB
  • Sample260706-d47z7ads4l
  • SHA256 e4834aaf04092bbd62048c9182a9d92fd527f900c72666d1e9f2dabbc6dddd03
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      KMS_VL_ALL_AIO_v45.cmd
    • Size 294KB
    • SHA256 e4834aaf04092bbd62048c9182a9d92fd527f900c72666d1e9f2dabbc6dddd03
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Event Triggered Execution: Image File Execution Options Injection

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks