e125de41f1be44f45311c03afdea125b4ae4a48a9005687eb0acc71d1dd54961
- SHA256 e125de41f1be44f45311c03afdea125b4ae4a48a9005687eb0acc71d1dd54961
Overview
overview
4Static
static
1MAS/All-In...IO.cmd
windows10-2004-x64
4MAS/All-In...IO.cmd
windows11-ltsc_2024-x64
4MAS/Separa...on.cmd
windows10-2004-x64
4MAS/Separa...on.cmd
windows11-ltsc_2024-x64
4MAS/Separa...IO.cmd
windows10-2004-x64
4MAS/Separa...IO.cmd
windows11-ltsc_2024-x64
4MAS/Separa...on.cmd
windows10-2004-x64
4MAS/Separa...on.cmd
windows11-ltsc_2024-x64
4MAS/Separa...on.cmd
windows10-2004-x64
4MAS/Separa...on.cmd
windows11-ltsc_2024-x64
4MAS/Separa...on.cmd
windows10-2004-x64
4MAS/Separa...on.cmd
windows11-ltsc_2024-x64
4MAS/Separa...on.cmd
windows10-2004-x64
4MAS/Separa...on.cmd
windows11-ltsc_2024-x64
4MAS/Separa...us.cmd
windows10-2004-x64
3MAS/Separa...us.cmd
windows11-ltsc_2024-x64
3MAS/Separa...er.cmd
windows10-2004-x64
4MAS/Separa...er.cmd
windows11-ltsc_2024-x64
4MAS/Separa...ot.cmd
windows10-2004-x64
4MAS/Separa...ot.cmd
windows11-ltsc_2024-x64
4MAS/Separa...e.html
windows10-2004-x64
3MAS/Separa...e.html
windows11-ltsc_2024-x64
3Static task
static1
Behavioral task
behavioral1
Sample
MAS/All-In-One-Version-KL/MAS_AIO.cmd
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
MAS/All-In-One-Version-KL/MAS_AIO.cmd
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
MAS/Separate-Files-Version/Activators/HWID_Activation.cmd
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
MAS/Separate-Files-Version/Activators/HWID_Activation.cmd
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
MAS/Separate-Files-Version/Activators/Ohook_Activation_AIO.cmd
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
MAS/Separate-Files-Version/Activators/Ohook_Activation_AIO.cmd
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
MAS/Separate-Files-Version/Activators/Online_KMS_Activation.cmd
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
MAS/Separate-Files-Version/Activators/Online_KMS_Activation.cmd
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
MAS/Separate-Files-Version/Activators/TSforge_Activation.cmd
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
MAS/Separate-Files-Version/Activators/TSforge_Activation.cmd
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral11
Sample
MAS/Separate-Files-Version/Change_Office_Edition.cmd
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
MAS/Separate-Files-Version/Change_Office_Edition.cmd
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
MAS/Separate-Files-Version/Change_Windows_Edition.cmd
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral14
Sample
MAS/Separate-Files-Version/Change_Windows_Edition.cmd
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral15
Sample
MAS/Separate-Files-Version/Check_Activation_Status.cmd
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral16
Sample
MAS/Separate-Files-Version/Check_Activation_Status.cmd
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral17
Sample
MAS/Separate-Files-Version/Extract_OEM_Folder.cmd
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral18
Sample
MAS/Separate-Files-Version/Extract_OEM_Folder.cmd
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral19
Sample
MAS/Separate-Files-Version/Troubleshoot.cmd
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral20
Sample
MAS/Separate-Files-Version/Troubleshoot.cmd
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral21
Sample
MAS/Separate-Files-Version/_ReadMe.html
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral22
Sample
MAS/Separate-Files-Version/_ReadMe.html
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
General
- Target e125de41f1be44f45311c03afdea125b4ae4a48a9005687eb0acc71d1dd54961
- Size 533KB
- Sample260717-efb4aaes6z
- SHA256 e125de41f1be44f45311c03afdea125b4ae4a48a9005687eb0acc71d1dd54961
- MD5 6f7c4e93780030146dc7f176fe76edfd
- SHA1 fd7d63c09c0b2d78eb4de445c3a4d8c400829911
- SHA512 d1d6f8c09ef6d2feb44a0723f6a68c30f0d672e87273fdf02c58591e5ec3c9bd369017f6d9e8b60cdce717148c346a88d3f5722ae62fdef80a77dfc02fc6dccd
- SSDEEP 12288:Ld36oGwoC47BsFbsyoYwvYpk1F22dQFnAfGf6bTMqHtUXYnRyPLsKZmRfj:xKoGwQ72b3oYwvYp+QefVbTRjgsvj
- TLSH T12CC423BC7638E05ADDF210BACA6EAE6C3E720FFD14880B545008295D5E637D1D6DBC62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
e125de41f1be44f45311c03afdea125b4ae4a48a9005687eb0acc71d1dd54961.zip 533KB
-
.gitattributes105B
-
LICENSE34KB
-
MAS/All-In-One-Version-KL/MAS_AIO.cmd.cmd .bat 744KB
-
MAS/Separate-Files-Version/Activators/HWID_Activation.cmd.cmd .bat 81KB
-
MAS/Separate-Files-Version/Activators/Ohook_Activation_AIO.cmd.cmd .bat 163KB
-
MAS/Separate-Files-Version/Activators/Online_KMS_Activation.cmd.cmd .bat 172KB
-
MAS/Separate-Files-Version/Activators/TSforge_Activation.cmd.cmd .bat 359KB
-
MAS/Separate-Files-Version/Activators/_ReadMe.txt752B
-
MAS/Separate-Files-Version/Change_Office_Edition.cmd.cmd .bat 56KB
-
MAS/Separate-Files-Version/Change_Windows_Edition.cmd.cmd .bat 49KB
-
MAS/Separate-Files-Version/Check_Activation_Status.cmd.cmd .ps1 47KB
-
MAS/Separate-Files-Version/Extract_OEM_Folder.cmd.cmd .bat 24KB
-
MAS/Separate-Files-Version/Troubleshoot.cmd.cmd .bat 58KB
-
MAS/Separate-Files-Version/_ReadMe.html.html 84B
-
README.md3KB
.gitattributes
- SHA256 029733aba3846ccd4b25842b09820477be0de4954c8d29cf74c6984ca2c0c049
- MD5 ab1055a3118e5e3a00e4846f20c8600c
- SHA1 0caeee39e512c8d262e94852ad3852dc7e60b97d
- SHA512 f9e7f91cc207f2464bf704d4cdf38dcbd18e1702d86056860d9c09e11be5d2c421a8a18c5da60240315ac3629193c2da5603893f08d973e446b24a59683cc8d1
- TLSH T106B001E3460E17A64E6E99E3D359D9C3F04644CA15D5B410137D87F2808BA025FA8E2E
- MD5 SHA1 SHA512 TLSH
LICENSE
- SHA256 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986
- MD5 1ebbd3e34237af26da5dc08a4e440464
- SHA1 31a3d460bb3c7d98845187c716a30db81c44b615
- SHA512 d361e5e8201481c6346ee6a886592c51265112be550d5224f1a7a6e116255c2f1ab8788df579d9b8372ed7bfd19bac4b6e70e00b472642966ab5b319b99a2686
- SSDEEP 768:Fo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7J:Fhcycsrfrnoum
- TLSH T15FF2835FB74413B2018206A26A9F68DEE319D03A73664095785DC15C27B3E3483BFBED
- MD5 SHA1 SHA512 SSDEEP TLSH
MAS/All-In-One-Version-KL/MAS_AIO.cmd
- SHA256 850f979665fb93999acae93f4790c1ff8ed2041532060b7966a121c2d29a0bfa
- MD5 8e0a0b48ad0289d647e55d802170d795
- SHA1 6adced8154ebaa02e06efcb85715d2663c731bd0
- SHA512 58edc773d275dec130cc5ede3c55edc5680f52e1b7ca4d78b349323f6d64b565ba052366b59ff4a94640fb49d14c2ec490dc69946bac9f921cb82bb62bffe563
- SSDEEP 6144:g3IufxkU5/8BcEvTGmFOE8THncQx4Oz0ykw7Auj:g3IuuhcEvTGGOEmcAXz0ykw7x
- TLSH T192F41A466D0261A601B3F379DE53814EFB2AC2638375526879ADC044BF36309A2FEF5D
- MD5 SHA1 SHA512 SSDEEP TLSH
MAS/Separate-Files-Version/Activators/HWID_Activation.cmd
- SHA256 6828dcb2650fffde272b3af4a3c3ce1ca85130fd210232cb1f56c8299693ea2d
- MD5 4595cab256806100ca8c5b84149e147b
- SHA1 8c3f2c89449282be86dd5437d18f1f7a32880001
- SHA512 2b777ba71a802154860fc9133cb3d5afac9269793cc20e9c77e95ca3209cb1370f053cc1bb0eaa92273e1f35bf84c61c522934ec3e89aa99aab19240efb54a2a
- SSDEEP 1536:1X/Aa/73y/DaKPPQVhEE6Zt/flC2nq7Dn6lirvGHIxGrS2cv9f6s:1X/1/O/P/g363HIpH
- TLSH T153832B07B50260A602B333B86E675686E31EC6A39371A35C796DC088774A74DF1FB79C
- MD5 SHA1 SHA512 SSDEEP TLSH
MAS/Separate-Files-Version/Activators/Ohook_Activation_AIO.cmd
- SHA256 9c77ecce70a4c7161589dbbe20d9282a0b5071dba6260abb59ca35a765f475ef
- MD5 a5d35955dacf2488695e739701e0f929
- SHA1 df89bda877c00fc9c5ee8a1b05baafbe43d340ca
- SHA512 df7e4e3dec433d7b27195d0260b1516cd012a8f51b241cd3c5de244183fc2aab6016511df290ea9a0dc8e756d0d57ed0431efa1552d86c99b454e1d643524d99
- SSDEEP 3072:Vg/m/HZU/Qx5GfeT3HIp2v2xcGmMZgnnwT:Xfx93IjY5Q
- TLSH T1ABF32B076E42A1F602B7F379AA57958EE32DC693C330A29D396ED094774630670FE24D
- MD5 SHA1 SHA512 SSDEEP TLSH
MAS/Separate-Files-Version/Activators/Online_KMS_Activation.cmd
- SHA256 1d9ff5e5e43b05a1d6b31a5ccbcfcc43ef907ecba015b95ee301e98612cfcf97
- MD5 6a9a84db114ed50b06eeae247113617b
- SHA1 6f56d28520095b6d3a5fc15940fb750cbe1f557a
- SHA512 dec7419333f4e0ef743d7eee9dcbe9f35bbfebda2f19ab65eb107a7f94e059f1d9379cf8727c0a9c66befa2cb4329b5ac362e1a9c77aba9cfb6e3782be8e77a6
- SSDEEP 3072:3ui/m/b/Y/FmUGgDM20t3HIpUGGjYcnck:3zmF3IQnck
- TLSH T19B044B47A54260E602F323BDAA569187F72EC2A34331E2AC356EC484BB5631B71F775C
- MD5 SHA1 SHA512 SSDEEP TLSH
MAS/Separate-Files-Version/Activators/TSforge_Activation.cmd
- SHA256 23a619c0d64635a25aa64c978476bddc2d66bfaa09fe0fc51fc6e7764e0afbd9
- MD5 704f216ede0d37cd7437de6271859bf2
- SHA1 500341d424b0a0c0fab7abb91a13d9a696c8d745
- SHA512 18fd15019ef235b2d1890cc0ad4b6b722026e40cff7f12e70c8606e419cca0fe01231870e4040eb8559a5d7d35d69c324aba735b05a54fe4173a68c6622deb3d
- SSDEEP 3072:D3/O/y/x/7/k2env0yf3/nNq/Q/3/O/3/UGs313HIp0Zl0FcExVTGX2THiwPr8rN:CA/k3IncEvTGmFOE0
- TLSH T1E2740945A913A5A705B33379DF42804AFB27C33303755369BAADC104AF7A309A2B5F6D
- MD5 SHA1 SHA512 SSDEEP TLSH
MAS/Separate-Files-Version/Activators/_ReadMe.txt
- SHA256 6aedcb540a68c71a12127ad41aee831798dfb4ba9a0db2590cf3d284e5993c11
- MD5 068f81a4bfcc3b89c12800adaca77f44
- SHA1 b76c6ce9401835de65ece9801af1c557e10b44cb
- SHA512 2e699cbbc788a53389d5baa3eb4c130a154f145220709898b5c9c0b7a666895402b16544fffeae897b2c051f31f163e204e21d9ded7d639b41bc70e5c55781ef
- TLSH T1CE01D8818DAAE2B0616AD38690CB0142D27766A2F91E3040F0FEA5E49BB1753776F5CC
- MD5 SHA1 SHA512 TLSH
MAS/Separate-Files-Version/Change_Office_Edition.cmd
- SHA256 4b7e5856c90a5cf90cd0e689d79ac476b76db0a755a8bc00fc3cb260bff9b024
- MD5 4ba61114ed2e18ba342171f20bd1fad7
- SHA1 1a3317037997c06992cda7679c0d6759a1b41e3a
- SHA512 e34444e4c8272a6581380b2f21d6b920e32753b38c3140395a1bc604841fb318f03d6accd849b3900830ee1c8dec98f51ba89e6980cd1407a1c3a465a15ad953
- SSDEEP 1536:N1/Da/O2y/t/Y/H/R6/Qd7p/S/LuXr7/N/0/Bp228:N1/+/k/t/Y/H/Y/O7p/S/LuXr7/N/0/c
- TLSH T115430957B94260A602A732BDD5A7914EF76DC2A3C32197DC386EC088B716354B0FDB68
- MD5 SHA1 SHA512 SSDEEP TLSH
MAS/Separate-Files-Version/Change_Windows_Edition.cmd
- SHA256 2e3d1ab1ec9120b199578bfa144106e8fadaa6b9c7fba40d3bcc6c341532bfca
- MD5 4a06062f085ef7951684f62f59e4aa94
- SHA1 121e9ddf48afb5a47192d3c6d58f4dbc70c13955
- SHA512 620baf4d951c4ccab9db7558ffe271752336af00ccf389015a4c83a920934bf5c9823d6d4d4f322754c95f6c8b969dc24f9acfa1ae2b2e1e49200f0b30ead44a
- SSDEEP 1536:2m/Aa/lp21d1/BX/rA/cz0ykWy2a+Rnu34W/y:2m/1/Gd1/BX/rA/cz0ykLO5sy
- TLSH T19C333B97750251A402F33275A56B828AF72EC1F3A720974C785DC0A8776B355F0BBEAC
- MD5 SHA1 SHA512 SSDEEP TLSH
MAS/Separate-Files-Version/Check_Activation_Status.cmd
- SHA256 6df2937385386d0c9682d351797e674583a410f4792bb7be45302f40ab90287e
- MD5 9acfe49b336529b1a7451a38daca8135
- SHA1 f0e32a16232ad71e0fc32aeacb3408b0b6b1b2db
- SHA512 f348217daa2d5a4793558dbb3ae20bfab00cacb9c0d5767a39085c71c238cdc7347498cc5b4f86ef801552cc1323557957615664a694c330597813ea6e9abe4d
- SSDEEP 384:TT51DLGNV1caT1UwZoio081ReKVwlfaNodso0XTf9rcKbVKQKUKypLw8wcH3L+rg:TTO1c2o9eyPvpnga+BnJbYTf4Jxm
- TLSH T15323E905FD1B926B5BC733926E72C68D6C7482EB06FE54A878CCC884F124F6893F9549
- MD5 SHA1 SHA512 SSDEEP TLSH
MAS/Separate-Files-Version/Extract_OEM_Folder.cmd
- SHA256 3463dac23a542bb6e3b8e689b282495bd0f791a7a256d3cfd69d45242a1c5469
- MD5 12e214d9068a74a7eb9175ce4066c046
- SHA1 cc236253c59e5f454304aa4845604ae1cd8e2227
- SHA512 afc6f28371246cfe6aa16f0c1d7d6723c338dab38bafe05e4d7688fec20e5782732c6549bfd9ab043e29fb7fdbea9f0a314efbcb66228de3f8e3ad8a3775dadc
- SSDEEP 384:DeJsOd3PBFhbnJcT/BFLGIS0SCHx3kbbxtUYnv1cwY:DSdfBFRnJcT/BFrS66v1cwY
- TLSH T1A0B2A4D72D06A06281B737BB4A37914EF72DC1A3D310BACDB49D4478B34A38DD4A91AD
- MD5 SHA1 SHA512 SSDEEP TLSH
MAS/Separate-Files-Version/Troubleshoot.cmd
- SHA256 aedff86fb47c06c30e5c487700d7e3effedc3094686bb30334597ed7e49c6ac2
- MD5 99c9bd0bd5b763a3695854fc222ece61
- SHA1 730fe77fb169e81e2f7885af5658acdabca32501
- SHA512 03a39cf95b82551ba420bab336ef50aecd0c3ac151a8f887aeb758925d1eca5c6de8b2ef4adb4f97cdafd6ab198b606f76cdfdd53a6d8577066359081a2fd77b
- SSDEEP 768:DSniBFpnNI/rBFXS6MOgXL9DlVhIQ++iW3AaPhPa01SAuXmPGnI1jzsWpjE50tUf:+i/pa/5MOgbHkQHiW3AC/te0c2G
- TLSH T1C843F813B60190B182F233B9DE37964EB71EC157D324AA8C759EC158775538AE0BA3EC
- MD5 SHA1 SHA512 SSDEEP TLSH
MAS/Separate-Files-Version/_ReadMe.html
- SHA256 8932bacd828c0716b136af6aa15011aed0015e7838006f2cff7a64954a5696b0
- MD5 574e18c1f9b32a47f988ac91588901ba
- SHA1 4c0827e3deeb84cf442e0356dfc1883bcb131fbb
- SHA512 4c480c530af4218e5ac276228a372fcd799912eb183685f805b6c47b5d6971be42a4dca2baa016425dc2499367624cb70de12d280ddcb7b613001460dbf820f8
- TLSH T1CCA012D296101C07533225B06CDE200641134C0179445020C1C0389B04B4F04CC83331
- MD5 SHA1 SHA512 TLSH
README.md
- SHA256 83026c75582e81b19d74f122ce0da2c2e009c461504ffec8149e1d0b68bd6c60
- MD5 103908bdaad045d48309f35b0c04aebf
- SHA1 77da62c56b568d3def37a6fd83fdb497dcb77287
- SHA512 4db9034f4f9775813917dc7cb18e35c2e870f3f243e56e9de80f4138b695b436f163d8dee6d0457d9c908c4f9401554929240e721a8d6cf9c95c101f7a49189f
- TLSH T16E7184A7C608B275172213EB591E698ED26390CB7ABCCA00F1663C082206471CBE879F
- MD5 SHA1 SHA512 TLSH