General
- Target Windows_activation_.exe
- Size 2.0MB
- Sample260823-zsys2azgnc
- SHA256 15c8aee0beddebe3eae3d666de68737fa9aa5b211540cbaa83ff03f0011f5224
- MD5 b4a32a8cb456c434429658fb4d440a71
- SHA1 9634db91736a90b52f391ed958e30c39207ac58e
- SHA512 f0908ba0d49680ddb333ee8589ea16d236ab2a2114d6d99b7edbdb920e8d3740bedc6d556f4cefdfda46d3377a1813f9b87f4fa42af9064a90d001e15ec7ce44
- SSDEEP 12288:mu/va+3zyqxan5rDyUq8Gvu5LVtlhLNzDhTLaniXh3kYBIeKuowv6Y8o:Dva+an5rDyUq8GveLLTLNzpa0k01ao
- TLSH T1CAA55006E7B610CDECB6DD3994522229B8713E95473897FFD245BA0A0B31BE4A93D703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Windows_activation_.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Windows_activation_.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target Windows_activation_.exe
- Size 2.0MB
- SHA256 15c8aee0beddebe3eae3d666de68737fa9aa5b211540cbaa83ff03f0011f5224
- MD5 b4a32a8cb456c434429658fb4d440a71
- SHA1 9634db91736a90b52f391ed958e30c39207ac58e
- SHA512 f0908ba0d49680ddb333ee8589ea16d236ab2a2114d6d99b7edbdb920e8d3740bedc6d556f4cefdfda46d3377a1813f9b87f4fa42af9064a90d001e15ec7ce44
- SSDEEP 12288:mu/va+3zyqxan5rDyUq8Gvu5LVtlhLNzDhTLaniXh3kYBIeKuowv6Y8o:Dva+an5rDyUq8GveLLTLNzpa0k01ao
- TLSH T1CAA55006E7B610CDECB6DD3994522229B8713E95473897FFD245BA0A0B31BE4A93D703
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Possible privilege escalation attempt
-
Modifies file permissions
-
Executes a VBScript file via the Windows Script Host.