Overview

overview

8

Static

static

3

kms1.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    kms1.exe
  • Size 1.1MB
  • Sample261110-31vccscf73
  • SHA256 9cec4e4419204a5624ee6f2d7860bfd88cc976156b77edd44a30654b47321a0c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarespyware

Malware Config

Targets

    • Target
      kms1.exe
    • Size 1.1MB
    • SHA256 9cec4e4419204a5624ee6f2d7860bfd88cc976156b77edd44a30654b47321a0c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    adwarespyware

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks