07811ef23dfebe290ebb693e6a73f773b2f2683483787f78c81df84fd54d86ce | Triage™

Login
Reports

Overview

overview

7

Static

static

3

Modular_KM...or.exe

windows10-ltsc_2021-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
Modular_KMS_Activator.exe
Size 9.9MB
Sample260710-lbx9aahy7t
SHA256 07811ef23dfebe290ebb693e6a73f773b2f2683483787f78c81df84fd54d86ce
MD5 77fb09fa8de16f72469e3f336ff60112
SHA1 4e527d11f9348e81608c7e0d60b0e32e20ddd0f9
SHA512 f2db06dc63243b901b812d17d6d03eb9828b23a471c7f6b66fa9521f02b0ff4ab58f7394c35ed280a8dfbc50cd346bf58f983f76950a3037f084f69499852069
SSDEEP 196608:HCBUGi50W8UAK8gnGCxdGjP5Ui2bjKVPy2wE4/Fe8xnEQOwuCFvC6AX:HCBU7aW8q8gnGCnGjKi2bjRo4Ne8xnE3
TLSH
T1E9A63389BBC108D4F88A4339DCD69967E3E5B9320764C59F1BF249521E231E9FE39720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution persistence pyinstaller

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Modular_KMS_Activator.exe

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

13 signatures

900 seconds

discovery execution persistence

Malware Config

Targets

- Target
  Modular_KMS_Activator.exe
- Size 9.9MB
- SHA256 07811ef23dfebe290ebb693e6a73f773b2f2683483787f78c81df84fd54d86ce
- MD5 77fb09fa8de16f72469e3f336ff60112
- SHA1 4e527d11f9348e81608c7e0d60b0e32e20ddd0f9
- SHA512 f2db06dc63243b901b812d17d6d03eb9828b23a471c7f6b66fa9521f02b0ff4ab58f7394c35ed280a8dfbc50cd346bf58f983f76950a3037f084f69499852069
- SSDEEP 196608:HCBUGi50W8UAK8gnGCxdGjP5Ui2bjKVPy2wE4/Fe8xnEQOwuCFvC6AX:HCBU7aW8q8gnGCnGjKi2bjRo4Ne8xnE3
- TLSH
  T1E9A63389BBC108D4F88A4339DCD69967E3E5B9320764C59F1BF249521E231E9FE39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Scheduled Task/Job

Scheduled Task

Persistence

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Scheduled Task/Job

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionpersistence

© 2018-2026

Terms | Privacy