General
- Target b60da52e95de38a5950f84404f837af381422995accc4cfc1e3717604fef4aee
- Size 4.2MB
- Sample260812-gk8ddszejh
- SHA256 b60da52e95de38a5950f84404f837af381422995accc4cfc1e3717604fef4aee
Score
7/10
Malware Config
Targets
-
- Target office激活工具/HEU_KMS_Activator_v63.0.0.exe
- Size 4.3MB
- SHA256 954a91cc3d0cb045d8e44a4dac7c349ca330cbd84f57853785f9754bbf4772f4
Score7/10-
Executes dropped EXE
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target office激活工具/当前目录添加到WD白名单.cmd
- Size 416B
- SHA256 f9e65a39bfcb45fa75a3fcce4c421a33ddd726dbf5a300ada0623f1ee3fcded2
Score6/10-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
- Target office激活工具/当前目录移除WD白名单.cmd
- Size 422B
- SHA256 608896bbc173dda3037eefca287ad6de2b032c14423b01d06135632c54037995
Score6/10-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.