Overview

overview

5

Static

static

3

Microsoft....er.dll

windows10-2004-x64

1

Microsoft....er.dll

windows11-ltsc_2024-x64

1

Windows Activator.exe

windows10-2004-x64

5

Windows Activator.exe

windows11-ltsc_2024-x64

5

Windows Ac...st.exe

windows10-2004-x64

3

Windows Ac...st.exe

windows11-ltsc_2024-x64

3

XylonV2.dll

windows10-2004-x64

1

XylonV2.dll

windows11-ltsc_2024-x64

1

dnlib.dll

windows10-2004-x64

1

dnlib.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    DebugActive.rar
  • Size 1.0MB
  • Sample261027-das9yah13z
  • SHA256 9cce0c2b35acd5e1dee77248adaa50484663364bc60eec33152fb3b586e356f0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
discoveryexecution

Malware Config

Targets

    • Target
      Microsoft.Win32.TaskScheduler.dll
    • Size 326KB
    • SHA256 5b666551577fb620852ff99a39227523db5828ac87f18652888964212531de38
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      Windows Activator.exe
    • Size 81KB
    • SHA256 71cc3868083542d757f8350a5b0ddd53ad49d1ef60267d5f382b3d05c6768a35
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    discoveryexecution

    • Executes a VBScript file via the Windows Script Host.

      execution
    behavioral3behavioral4
    • Target
      Windows Activator.vshost.exe
    • Size 22KB
    • SHA256 f4cefed49fb2f58655cde4c216f4e52a1f2aaaea0b5809664a97f075026f92bc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      XylonV2.dll
    • Size 1.8MB
    • SHA256 5221c5cd0e15ac46eb0dd592fea2883af2254107b9c6e899ecab5f0a18871374
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      dnlib.dll
    • Size 1.1MB
    • SHA256 884b4fb8574cd2b0356304e3e7006d492f9aabf53e096e7e061cd164ddc64248
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9

MITRE ATT&CK Enterprise v16

Tasks