Analysis
-
max time kernel
108s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
17/03/2023, 18:04
Static task
static1
Behavioral task
behavioral1
Sample
CLIPStudioPaint.exe
Resource
win7-20230220-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
CLIPStudioPaint.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
CLIPStudioPaint.exe
-
Size
32.7MB
-
MD5
7eef51fe32ad9a7d0dc8ef15ffcc8db4
-
SHA1
f03ada8ee0e29fcd3e9f37a0d4866041d06cd365
-
SHA256
c9e771a81d11701e67d8135c8a33797f57e37807668c9790305a617f65caa1ad
-
SHA512
a24848e4a010e31fa256cce4a2eeec7447ed0f2a6c3a4cff13b91e5233f3990f67ce9ba4d44831635fb63b675d7915864b1a26f6ce7aad1d9c87f88bb8c8e575
-
SSDEEP
786432:bHmHIwjW2HkkkSmRtBwateQFllmZi1DRb5:yHIwW2HkNV6ateQ7Rb5
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: LoadsDriver 6 IoCs
pid Process 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 636 Process not Found
Processes
-
C:\Users\Admin\AppData\Local\Temp\CLIPStudioPaint.exe"C:\Users\Admin\AppData\Local\Temp\CLIPStudioPaint.exe"1⤵PID:1352
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:5616