General
- Target activ_setup_kmsV3.17.exe
- Size 10.9MB
- Sample260723-mr6e9swcmf
- SHA256 d068e55eb7c1be1c2c28110eb731f124e511bfc6be9805173d146b1f055428a8
- MD5 0aff1535360d11e390cf809b511a4199
- SHA1 af2054fdd9b4ca604cfe41c66c228aca7f4225f7
- SHA512 a5ac652166d651ece8a84c36c678ddb7fac3dbcb9548185d8cd0aa0e374ab381d4962c0724705193eba7c1443023f0f77947f75384d18133434911e424ec5501
- SSDEEP 98304:MoJJqZ9cLtDDeVw/C4lihhaTLycgyYwKFIu:v6cZDF/C4lFWTyYGu
- TLSH T107B61233B28A753EE06E1A395A72E110583B7A61AD434D5AD7F4086CCF252B13E3B747
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
activ_setup_kmsV3.17.exe
Resource
win10v2004-20260513-en
5 signatures
300 seconds
Behavioral task
behavioral2
Sample
activ_setup_kmsV3.17.exe
Resource
win10ltsc2021-20260513-en
5 signatures
300 seconds
Behavioral task
behavioral3
Sample
activ_setup_kmsV3.17.exe
Resource
win11-20260513-en
5 signatures
300 seconds
Malware Config
Targets
-
- Target activ_setup_kmsV3.17.exe
- Size 10.9MB
- SHA256 d068e55eb7c1be1c2c28110eb731f124e511bfc6be9805173d146b1f055428a8
- MD5 0aff1535360d11e390cf809b511a4199
- SHA1 af2054fdd9b4ca604cfe41c66c228aca7f4225f7
- SHA512 a5ac652166d651ece8a84c36c678ddb7fac3dbcb9548185d8cd0aa0e374ab381d4962c0724705193eba7c1443023f0f77947f75384d18133434911e424ec5501
- SSDEEP 98304:MoJJqZ9cLtDDeVw/C4lihhaTLycgyYwKFIu:v6cZDF/C4lFWTyYGu
- TLSH T107B61233B28A753EE06E1A395A72E110583B7A61AD434D5AD7F4086CCF252B13E3B747
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL