kaspersky_premium_21_22_klyuchi.rar
- SHA256 046a092fa17dd66e94089a15b53e47c4c2b439222461910621bed31ffc42b1dd
Password
vot-soft
Overview
overview
8Static
static
1kaspersky_...hi.rar
windows10-2004-x64
8kaspersky_...hi.rar
windows11-ltsc_2024-x64
1Kaspersky ...22.exe
windows10-2004-x64
6Kaspersky ...22.exe
windows11-ltsc_2024-x64
6Kaspersky ...У.url
windows10-2004-x64
1Kaspersky ...У.url
windows11-ltsc_2024-x64
1Kaspersky ...ч.txt
windows10-2004-x64
1Kaspersky ...ч.txt
windows11-ltsc_2024-x64
1Static task
static1
Behavioral task
behavioral1
Sample
kaspersky_premium_21_22_klyuchi.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
kaspersky_premium_21_22_klyuchi.rar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
Kaspersky Premium 21.22/Kaspersky Premium 21.22.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
Kaspersky Premium 21.22/Kaspersky Premium 21.22.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral5
Sample
Kaspersky Premium 21.22/ВОТ-СОФТ.РУ.url
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Kaspersky Premium 21.22/ВОТ-СОФТ.РУ.url
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Kaspersky Premium 21.22/Ключ.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Kaspersky Premium 21.22/Ключ.txt
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target kaspersky_premium_21_22_klyuchi.rar
- Size 615.2MB
- Sample260723-x98nfstyay
- SHA256 046a092fa17dd66e94089a15b53e47c4c2b439222461910621bed31ffc42b1dd
- MD5 dd91cb4fa3f73c2160b8cfac2213e941
- SHA1 c95a485308fe12a8147c728089fe1f31a7f4d655
- SHA512 0be64d73e94ddd219c08e2c57a6d9155ff55b8099ad78af1a45c03812b6f68217b0ec914270c137832ab647917c6ed16f69240ff832fb00079edb52a11030a37
- SSDEEP 12582912:7VKBPWuK/+8p+wS2am9OMZykynX2d7ai2N4iR+m+Q/M7+fhSkRMwsICEuTk3:4Z9j2am9mRnGVaiwZRf+ST2wZX
- TLSH T1D66933C90634C9E5AC64937F81FDCAD2D5FBBB75574790AB0253E343898887C20629EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
kaspersky_premium_21_22_klyuchi.rar.rar 615.2MB
-
Kaspersky Premium 21.22/Kaspersky Premium 21.22.exe.exe 615.4MB
-
Kaspersky Premium 21.22/ВОТ-СОФТ.РУ.url.url 114B
-
Kaspersky Premium 21.22/Ключ.txt530B
Kaspersky Premium 21.22/Kaspersky Premium 21.22.exe
- IMPHASH 3b629027afbe60960e4099d322d33917
- SHA256 3a2a773da3399382e5a96d66dd764dbe2c1542a8c8ca395ced039a0b1f6aded9
- MD5 3b723239740a67f725ccd1de55195ea5
- SHA1 b34b340ebbc9c8f49d6e3d11026517250ef27984
- SHA512 27cd86f9274e76cc084697a735b964a9a172223bda572bc67e0ddffd134594f015d4a5f15ccfa5926ea2b3300c9f58260805b1d6f6302741ca5eba9dcdffd4b7
- SSDEEP 12582912:Q7pygtUXOXbvO+vfSIatw52OVZlhEmFCLWRiIHhEdm00zRtgo/eSuk:Qlyg2eX7rvfmQ2IlhE4CLxIBEdm04RrP
- TLSH T1E06933566DBE064AF808A93C285D3937C23336EE730FA42765B816B31A137C1A53D376
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
vot-soft
PE Signature issue
Digest
10:15:dc:bd:c9:0c:bf:59:47:3e:ec:dc:d5:7a:ab:a9:4a:2a:ee:63:89:8f:73:1c:72:15:bd:a8:66:72:25:6b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Kaspersky Lab,O=Kaspersky Lab,L=Moscow,C=RU
Chains
Jul 15, 2025
CN=Kaspersky Lab,O=Kaspersky Lab,L=Moscow,C=RU
Digest
10:15:dc:bd:c9:0c:bf:59:47:3e:ec:dc:d5:7a:ab:a9:4a:2a:ee:63:89:8f:73:1c:72:15:bd:a8:66:72:25:6b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=1027739867473,CN=AO Kaspersky Lab,O=AO Kaspersky Lab,STREET=sh Leningradskoe\, 39A / str 2,L=Moscow,ST=Moscow,C=RU,1.3.6.1.4.1.311.60.2.1.2=#13064d6f73636f77,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jul 15, 2025
SERIALNUMBER=1027739867473,CN=AO Kaspersky Lab,O=AO Kaspersky Lab,STREET=sh Leningradskoe\, 39A / str 2,L=Moscow,ST=Moscow,C=RU,1.3.6.1.4.1.311.60.2.1.2=#13064d6f73636f77,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=1027739867473,CN=AO Kaspersky Lab,O=AO Kaspersky Lab,STREET=sh Leningradskoe\, 39A / str 2,L=Moscow,ST=Moscow,C=RU,1.3.6.1.4.1.311.60.2.1.2=#13064d6f73636f77,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=1027739867473,CN=AO Kaspersky Lab,O=AO Kaspersky Lab,STREET=sh Leningradskoe\, 39A / str 2,L=Moscow,ST=Moscow,C=RU,1.3.6.1.4.1.311.60.2.1.2=#13064d6f73636f77,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
13:bf:f1:25:c6:50:d7:c5:a0:82:20:8f
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 4, 2022 - Aug 4, 2025
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Kaspersky Lab,O=Kaspersky Lab,L=Moscow,C=RU
Serial Number
1a:cc:0c:ca:0c:2c:b1:40:61:6e:db:ac:81:b9:6e
Issuer
CN=Kaspersky Lab,O=Kaspersky Lab,L=Moscow,C=RU
Timespan
Aug 25, 2021 - Aug 25, 2036
Minor OS version
0
Major OS version
6
Entry point
15136
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\a\b\d_00000000_\b\b\execroot\k\bazel-out\x86_32-windows-opt-ST-bd47c771e5d9\bin\product\kavkis\PPP\Install\Setup\starter\setup.pdb
kernel32
LocalAlloc
OpenProcess
WaitForSingleObject
CloseHandle
DeleteFileW
RemoveDirectoryW
GetModuleFileNameW
GetLastError
CreateDirectoryW
CompareStringW
GetTempPathW
ExpandEnvironmentStringsW
CreateProcessW
CreateFileW
GetSystemWindowsDirectoryW
GetExitCodeProcess
GetCurrentProcessId
ReadFile
FormatMessageW
GetModuleHandleW
GetFileAttributesW
SetCurrentDirectoryW
LoadLibraryExW
GetProcAddress
FreeLibrary
LocalFree
HeapFree
GetProcessHeap
MultiByteToWideChar
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetModuleHandleA
GetCurrentProcess
GetCurrentDirectoryW
MoveFileW
HeapAlloc
RaiseException
GetCurrentThreadId
Sleep
GetModuleHandleExW
GetLocalTime
SetUnhandledExceptionFilter
SetEnvironmentVariableW
GetWindowsDirectoryW
GetLongPathNameW
LoadLibraryW
SetDllDirectoryW
SetLastError
FindResourceExW
LoadResource
LockResource
SizeofResource
WriteFile
GetModuleFileNameA
GetModuleHandleExA
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateEventW
SetEvent
ResetEvent
DeleteCriticalSection
FindNextFileW
FindClose
MoveFileExW
GetTempFileNameW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
FormatMessageA
FindFirstFileExW
GetFileAttributesExW
GetFileInformationByHandle
SetFileInformationByHandle
SetFilePointerEx
AreFileApisANSI
CopyFileW
GetFileInformationByHandleEx
WideCharToMultiByte
GetStringTypeW
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
VirtualQuery
RtlUnwind
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
CreateThread
ExitThread
FreeLibraryAndExitThread
GetStdHandle
GetFileType
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
HeapReAlloc
HeapSize
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
WriteConsoleW
VirtualProtect
VirtualAlloc
GetSystemInfo
FlushInstructionCache
GetTickCount
LoadLibraryExA
Name
.text
Size
249KB
Virtual Size
249KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
74KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
64B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
615.0MB
Virtual Size
615.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=28900,
count=162, id=261, version=28900,
count=22, id=260, version=28900,
count=3, id=257, version=28900,
count=18, id=260, version=30034,
count=20, id=259, version=30034,
count=203, id=1, productName=Unmarked objects,
count=96, id=261, version=30034,
count=28, id=265, version=30148,
count=1, id=255, version=30148,
count=1, id=151,
count=1, id=258, version=30148,
Kaspersky Premium 21.22/ВОТ-СОФТ.РУ.url
- SHA256 bc6b5d9d6d711bd43c9d6be5f6229fbfbbd1c57e060227b9d2a5fcf3b9dbaa3f
- MD5 39281db939652c22b35be5aa97a83162
- SHA1 9466854c7f5170766a9172890ba296028a42e37c
- SHA512 1e45b4ae9bfd1e0cb290501ee3f4aac23ba7c016010f6d627b714d269eaa2982e041ec680d5b4a865fec51cb0369fc1c6b283a61d5a2a3935de719371ebf076f
- TLSH T18AB012BF5405C399D141840E50B0F808DC0F79B04CD3E0DCA148DFDB0D080D1C559B36
- MD5 SHA1 SHA512 TLSH
Kaspersky Premium 21.22/Ключ.txt
- SHA256 9c0626c948dee8bf6c5685b3be44066d9e7dd997c8db1d8550ce19054d0adebc
- MD5 696becd71b33f9bcfbc47b97eded01b3
- SHA1 df77654fd145f267bf0a568164e7a00be4bebe42
- SHA512 d111119d389a98dda00f7b294d77c76cea31b010eb79f69594aa884911b54b234301ccafac4d12e88186a8d9d55508c316623c340d1c0cdcaf433a16d1fe35f3
- TLSH T1DEF0C9DC1CE8C440BE84DC2C0390AB58537D58ED283E08CD3A8E70228FECA93C718400
- MD5 SHA1 SHA512 TLSH