General
- Target Office2010_KmsActivator.exe
- Size 323KB
- Sample260718-pg5gbsbt4n
- SHA256 b28f51476dbcf0a345151e3059a360dfb047607547e7ba52597f557e1cad3e6d
- MD5 759f6bd42c24ea92e04f36f3f858d953
- SHA1 8531f7f1323118d98d689460e58e2a9bf81a921b
- SHA512 d9e548c73f4d65c2e7438e9bae682ec08ac3125e6a7b690956c3d0593c67414b1a1f2d34e4771ee7eaf164fce7cad7e2e25e195eea1768d55f6d4a44823cca7b
- SSDEEP 6144:DcWMJJhqryYP/daqs75aaWYcdY88pzS6JR3a7hGCPHgUIyj33yIZusm:DczJJhqrVPlVvKDpR3a9GCPHglyj33ta
- TLSH T10264F125318878F3DE8B1B715B5C87A6217B3E3025717085FFA63B596B329D3AA1C1C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Office2010_KmsActivator.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Office2010_KmsActivator.exe
- Size 323KB
- SHA256 b28f51476dbcf0a345151e3059a360dfb047607547e7ba52597f557e1cad3e6d
- MD5 759f6bd42c24ea92e04f36f3f858d953
- SHA1 8531f7f1323118d98d689460e58e2a9bf81a921b
- SHA512 d9e548c73f4d65c2e7438e9bae682ec08ac3125e6a7b690956c3d0593c67414b1a1f2d34e4771ee7eaf164fce7cad7e2e25e195eea1768d55f6d4a44823cca7b
- SSDEEP 6144:DcWMJJhqryYP/daqs75aaWYcdY88pzS6JR3a7hGCPHgUIyj33yIZusm:DczJJhqrVPlVvKDpR3a9GCPHglyj33ta
- TLSH T10264F125318878F3DE8B1B715B5C87A6217B3E3025717085FFA63B596B329D3AA1C1C2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.