Overview

overview

9

Static

static

5

HEU_KMS_Ac....0.exe

windows10-2004-x64

9

HEU_KMS_Ac....0.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    c0a78cf0184428a3ba790c0f43c6e38f41ed48f52d9946715477b6e5644ccdf7
  • Size 6.7MB
  • Sample260905-qzjs1seb82
  • SHA256 c0a78cf0184428a3ba790c0f43c6e38f41ed48f52d9946715477b6e5644ccdf7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
discoveryexecution

Malware Config

Targets

    • Target
      HEU_KMS_Activator_v24.4.0.exe
    • Size 7.3MB
    • SHA256 bed7348b20e1f6a8d59263f3156b6136eca9969981bbeee43ec3e3c1d1807585
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    discoveryexecution

    • Detected Nirsoft tools

      Free utilities often used by attackers which can steal passwords, product keys, etc.

    • Executes dropped EXE

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks