General
- Target KMS_VL_ALL_AIO_v45.cmd
- Size 294KB
- Sample260706-d47z7ads4l
- SHA256 e4834aaf04092bbd62048c9182a9d92fd527f900c72666d1e9f2dabbc6dddd03
- MD5 d3c01098dd10c824352f0bf8d3ae4f0c
- SHA1 dc2035e2ef729018dd80b3f12035e1453b26a466
- SHA512 c04ae07e87a9e692feda7346adf8be0786dfa118befbe356b38744a73d436897dc16d323c226d01a67f145f0485d41f6132ca32ba3165b7930689abfadff8303
- SSDEEP 6144:RJaJLDu5pC98GnFSdrnfKn5pw9rIjEUqbj8HmAkLKvyQ:RJaJLUpCCrnyn5pmUjE/j8GAk6yQ
- TLSH T17D545C0232842165C2F20375D622B50BFF2EB2A756E2E68CB57FC4557FB54836AF3285
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
KMS_VL_ALL_AIO_v45.cmd
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
KMS_VL_ALL_AIO_v45.cmd
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target KMS_VL_ALL_AIO_v45.cmd
- Size 294KB
- SHA256 e4834aaf04092bbd62048c9182a9d92fd527f900c72666d1e9f2dabbc6dddd03
- MD5 d3c01098dd10c824352f0bf8d3ae4f0c
- SHA1 dc2035e2ef729018dd80b3f12035e1453b26a466
- SHA512 c04ae07e87a9e692feda7346adf8be0786dfa118befbe356b38744a73d436897dc16d323c226d01a67f145f0485d41f6132ca32ba3165b7930689abfadff8303
- SSDEEP 6144:RJaJLDu5pC98GnFSdrnfKn5pw9rIjEUqbj8HmAkLKvyQ:RJaJLUpCCrnyn5pmUjE/j8GAk6yQ
- TLSH T17D545C0232842165C2F20375D622B50BFF2EB2A756E2E68CB57FC4557FB54836AF3285
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Event Triggered Execution: Image File Execution Options Injection
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1PowerShell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Event Triggered Execution
1Image File Execution Options Injection
1Scheduled Task/Job
1Scheduled Task
1