1e2897e81f954e536ec0fd59a517ac29db440b115741e4c8d67c1f038b82bd07

Sharing

Copy URL Twitter E-mail

General

Target

Aseprite.v1.2.40.zip
Size

54.4MB
Sample

230310-zmwrgshb3w
MD5

ada25a08ef6c9d6d7a694013f62823ff
SHA1

60187aff44b1c9cf11e8c62685dfd70c1c29a1d1
SHA256

1e2897e81f954e536ec0fd59a517ac29db440b115741e4c8d67c1f038b82bd07
SHA512

d82022f6d9d4a4704409214dc44518c7d464853ff8ee9e2e3d5bc3d0d7eb3889a0cce8ce4d3d3c55022d697cd863c22e6a232a4d61840526ef0ecdb95516fc4b
SSDEEP

1572864:zOKDWz5hRhpdP/H4kp+xHPBpR9XPqi3F7Hg1BWRiHiiR8LM:zOsWT/Ykp+ZnXCi3JAfBJ

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  Aseprite.v1.2.40/Aseprite.v1.2.40/Aseprite.exe
- Size
  
  17.6MB
- MD5
  
  d0b60498c0b38bf245b574a09fb0512f
- SHA1
  
  77e6d027f2c8a627f995abfabe2dde33eb33e910
- SHA256
  
  012d903c0be77f2ed0fa76fe3f75a6ea173d235d478f10814199e70832b2d5f0
- SHA512
  
  d9fd0f49d2cd3832b8c5da308c7f623b57fae660e336de2bcfbbefadae38776958341ca04e70e4f7abd7e7ec84a79335779f478ca938b4d8009136c552ae4b20
- SSDEEP
  
  98304:f/0fOcvjVIIl7po6QeLN2uX0zDMvdalOD4KE2x9rwV67rQIVvL5FiRzM6svMA3H2:ELJVCRI6svMAXc6o9tYaEIZhZH
Score

3^/10
behavioral1 behavioral2
- Target
  
  Aseprite.v1.2.40/Aseprite.v1.2.40/aseprite_crashpad_handler.exe
- Size
  
  1.9MB
- MD5
  
  33e847b5ade7ebd3c117436b578db092
- SHA1
  
  c2c2eace472827bd9d3af8948009bd32b3d19e5a
- SHA256
  
  16af126aab836a77f016759818120f9ecbfc459309a64e048ccd06b9865b52ac
- SHA512
  
  d66fec0d848e67744bcccf44c3dd47d827ac3fd4212277f549e7c3d84ee8cbd8db136d5a210887a252b4bfd72402a614349076ba7458e9fe9d37ce153170ec00
- SSDEEP
  
  49152:lzChu/ybsqILAPDi0oyL9RBFQRaRaO99xB9dBuYd50T8aTdo:Z50bwo
Score

1^/10
behavioral3 behavioral4
- Target
  
  Aseprite.v1.2.40/Aseprite.v1.2.40/data/extensions/aseprite-theme/sheet.aseprite-data
- Size
  
  93B
- MD5
  
  d81bcfb11ca1cde8b9e0ed7c8dbe4a20
- SHA1
  
  0d0af2d03aa064907f76f5040d4c368881ae8a74
- SHA256
  
  ae0f67752e903ac268ed61197b26b1bab04888ff8f6aa196840d60403c6de7d1
- SHA512
  
  ff206e8a0815d06709f8d656b6cd5accaa2110c6e5bafad7ad068f9da1e91475a1f2a71deaf7cbaba3b4f81202a4d8b7df3755b344a73d88e3ca35c583f70046
Score

1^/10
behavioral5 behavioral6
- Target
  
  Aseprite.v1.2.40/Aseprite.v1.2.40/steam_api64.dll
- Size
  
  1.9MB
- MD5
  
  37a7e0deae6e7bd1154f8fd059f9a241
- SHA1
  
  5787b8db0d0d656d13474cd7d2caf66c443e181c
- SHA256
  
  eb9b78ef3c339591c1993c9c364098de386edd391e1169ea0a6daa39ae9735a9
- SHA512
  
  6d375c3abceb83a48b277ebafa7da24128fa97cdde7b3f3e89970671582ff3af8a413fead8d074127a97fc34cc423fd218f878ee3a218f6f28be3aededbf83f7
- SSDEEP
  
  24576:0Nip4KmiEeJARIEOzje4nKGyAJ1VyKm9m0DKXC5CMcWXoyefCJXS0abv:EM/mIYI37p7VyKmTcMcWXAfCHab
Score

1^/10
behavioral7 behavioral8
- Target
  
  Aseprite.v1.2.40/Aseprite.v1.2.40/steam_api64.dll.bak
- Size
  
  291KB
- MD5
  
  6b4ab6e60364c55f18a56a39021b74a6
- SHA1
  
  39cac2889d8ca497ee0d8434fc9f6966f18fa336
- SHA256
  
  1db3fd414039d3e5815a5721925dd2e0a3a9f2549603c6cab7c49b84966a1af3
- SHA512
  
  c08de8c6e331d13dfe868ab340e41552fc49123a9f782a5a63b95795d5d979e68b5a6ab171153978679c0791dc3e3809c883471a05864041ce60b240ccdd4c21
- SSDEEP
  
  3072:504VEQ2u/niy9UVLCe9ZqdrP+VXvv+sJYB2RHKBi65lhTbCc+hnvvEyP7yq+uei1:QZu/i874ZcrMv2cRh7yqO2CPLHxYq8/B
Score

1^/10
behavioral10 behavioral9
- Target
  
  Aseprite.v1.2.40/STEAMUNLOCKED » Free Steam Games Pre-installed for PC.url
- Size
  
  52B
- MD5
  
  92672216743fd0ad8799d25ec99e5096
- SHA1
  
  68103be0fa83db8a4a2efac6bb6169ce959a0290
- SHA256
  
  677d2e85447eea64fa541b8e8a9e92b41e20456360bef8642f898e7eb1b2f0db
- SHA512
  
  1ca286141902e64c4cac05fabc1ce0ef4d910582e720c8b38f3cf2799cadaab7cbc9d8fc925eff17e0d3280d5d074ebd856dc75d6cadbd95872cae14eddb7719
Score

1^/10
behavioral11 behavioral12
- Target
  
  Aseprite.v1.2.40/_Redist/dotNetFx40_Full_setup.exe
- Size
  
  868KB
- MD5
  
  53406e9988306cbd4537677c5336aba4
- SHA1
  
  06becadb92a5fcca2529c0b93687c2a0c6d0d610
- SHA256
  
  fa1afff978325f8818ce3a559d67a58297d9154674de7fd8eb03656d93104425
- SHA512
  
  4f89da81b5a3800aa16ff33cc4a42dbb17d4c698a5e2983b88c32738decb57e3088a1da444ad0ec0d745c3c6b6b8b9b86d3f19909142f9e51f513748c0274a99
- SSDEEP
  
  24576:+tW4x8xAxCdUcyezFSjaBHFaNlsqK5/oh6iZf1LUXw/vxNI:d4x8xqCGexm8FCspg0iZf1LUXD
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral13 behavioral14
- Target
  
  Aseprite.v1.2.40/_Redist/dxwebsetup.exe
- Size
  
  281KB
- MD5
  
  fd6057b33e15a553ddc5d9873723ce8f
- SHA1
  
  f90efb623b5abea70af63c470daa8674444fb1df
- SHA256
  
  111aeddc6a6dbf64b28cb565aa12af9ee3cc0a56ce31e4da0068cf6b474c3288
- SHA512
  
  d894630c9a4bdb767e9f16d1b701acbdf011e721768ba0dc7a24e6d82a4d062a7ca253b1b334edba38c06187104351203a92c017838bdd9f13905cde30f7d94d
- SSDEEP
  
  6144:pWK8EGMUjp5cGQ3Mek1B3B9h8Ins3i8AEYBSawz1YSc:JGvjp5cj35kDB9hrs3zARBSaJSc
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral15 behavioral16
- Target
  
  Aseprite.v1.2.40/_Redist/oalinst.exe
- Size
  
  790KB
- MD5
  
  694f54bd227916b89fc3eb1db53f0685
- SHA1
  
  21fdc367291bbef14dac27925cae698d3928eead
- SHA256
  
  b8f39714d41e009f75efb183c37100f2cbabb71784bbd243be881ac5b42d86fd
- SHA512
  
  55bc0de75a7f27f11eb8f4ee8c9934dfe1acd044d8b7b2151c506bdcbead3ab179df7023f699c9139c77541bbc4b1c0657e93c34a6bc4309b665c6cb7636a7e5
- SSDEEP
  
  12288:0s1yfEcpPzdv+t4cRIy3ze3SUN0PXGTjiqRy2p3kwzjGHTkV:NwfLrvi4cRIyDe3SUNaXy+WypoGHgV
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral17 behavioral18
- Target
  
  Aseprite.v1.2.40/_Redist/vcredist_2015-2019_x64.exe
- Size
  
  14.3MB
- MD5
  
  f0248d477e74687c5619ae16498b13d4
- SHA1
  
  9ed4b091148c9b53f66b3f2c69be7e60e74c486a
- SHA256
  
  b6c82087a2c443db859fdbeaae7f46244d06c3f2a7f71c35e50358066253de52
- SHA512
  
  0c373b06ffe84f3e803831e90f22d7d73304e47a47839db614f63399ff1b7fcf33153bf3d23998877c96d2a75e316291a219fdd12358ca48928526284b802591
- SSDEEP
  
  393216:q5lptVYmfr7yBG/4WoI+j6LTinXKSf0fzTDv8:q7pttD7yBG/uljIinXj0fQ
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral19 behavioral20
- Target
  
  Aseprite.v1.2.40/_Redist/vcredist_2015-2019_x86.exe
- Size
  
  13.7MB
- MD5
  
  de34b1c517e0463602624bbc8294c08d
- SHA1
  
  5ce7923ffea712468c05e7ac376dd9c29ea9f6be
- SHA256
  
  ac96016f1511ae3eb5ec9de04551146fe351b7f97858dcd67163912e2302f5d6
- SHA512
  
  114bca1ecd17e419ad617a1a4341e607250bcb02626cdc0670eb60be734bbad1f3c84e38f077af9a32a6b1607b8ce6e4b3641c0faefaa779c0fec0d3ac022dac
- SSDEEP
  
  393216:/d/FlptVYmfr7yBG/4JU4TRjtjUMy4i6kgsY7i:/1PpttD7yBG/QHTJtYMyke9
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral21 behavioral22
- Target
  
  Aseprite.v1.2.40/_Redist/vcredist_x64.exe
- Size
  
  5.5MB
- MD5
  
  630d75210b325a280c3352f879297ed5
- SHA1
  
  b330b760a8f16d5a31c2dc815627f5eb40861008
- SHA256
  
  b06546ddc8ca1e3d532f3f2593e88a6f49e81b66a9c2051d58508cc97b6a2023
- SHA512
  
  b6e107fa34764d336c9b59802c858845df9f8661a1beb41436fd638a044580557921e69883ed32737f853e203f0083358f642f3efe0a80fae7932c5e6137331f
- SSDEEP
  
  98304:EuLgywiNHBeSLxYK/bxE3q/BlZkWMGPQflVJ/EK1sLyzs2T2Q1mOjq4/:V7wqheSVYK/bua/BlWWnuVhsus8nm+qi
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral23 behavioral24
- Target
  
  Aseprite.v1.2.40/_Redist/vcredist_x86.exe
- Size
  
  4.8MB
- MD5
  
  b88228d5fef4b6dc019d69d4471f23ec
- SHA1
  
  372d9c1670343d3fb252209ba210d4dc4d67d358
- SHA256
  
  8162b2d665ca52884507ede19549e99939ce4ea4a638c537fa653539819138c8
- SHA512
  
  cdd218d211a687dde519719553748f3fb36d4ac618670986a6dadb4c45b34a9c6262ba7bab243a242f91d867b041721f22330170a74d4d0b2c354aec999dbff8
- SSDEEP
  
  98304:RuLgywiN1ah6HcG0UJrN7SDgndrHZDMeaNNjt0CKKBgY2r71pZ/APaOR72HgQo0z:I7wq1W6HqULS8djZDTaNNeCKVP5ORsg0
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral25 behavioral26
- Target
  
  Aseprite.v1.2.40/_Redist/xnafx40_redist.msi
- Size
  
  6.7MB
- MD5
  
  97c2eebb30c5a88c68c8f24f37183f1d
- SHA1
  
  49efdc29f65fc8263c196338552c7009fc96c5de
- SHA256
  
  e6c41d692ebcba854dad4b1c52bb7ddd05926bad3105595d6596b8bab01c25e7
- SHA512
  
  c9d1017b274ceb1b4ee624cf7e628787c32a727c64f715fbce1f1ae929d9114f8fe1291e34583cec615619b0128c01206b07efc878e7a5c57b792453f73fd0da
- SSDEEP
  
  98304:wynfL329J1XswfXO6wiBB+4RZg6aENaCZAU5PMO0MntfERyJGH2YPq/:wYD3C1XXfzH+4cLHU5PM/Mnt+YGlq
Score

8^/10
- Blocklisted process makes network request
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral27 behavioral28

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Executes dropped EXE

Loads dropped DLL

Adds Run key to start application

Drops file in System32 directory

Loads dropped DLL

Checks installed software on the system

Drops file in System32 directory

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Executes dropped EXE

Loads dropped DLL

Executes dropped EXE

Loads dropped DLL

Blocklisted process makes network request

Enumerates connected drives

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28