General
-
Target
PaintToolSAI_1-2-0.exe
-
Size
2.1MB
-
Sample
230402-jfhy2sge7z
-
MD5
921a8cb82430236012c4be7705ceab18
-
SHA1
7f854a576bfa46343bfdb3598c39fd286f3c98d7
-
SHA256
d57a76b71b189db7b44291cfe1eec876c9ed462cfd1ddc5faa14ec0a5babbeb4
-
SHA512
5269c94b064c617bfb32fea50957e74bd394191221264061f1f1fb143422f109629bcda55e617203799ec730ba6e92277bcc01ebae5976193beaa2be52b68e2c
-
SSDEEP
49152:V986H5UaT5iO2JQ/doSz1X/bNUIP+jmmoBT:z8eUaT5i5QV3ztbb+jD+
Static task
static1
Behavioral task
behavioral1
Sample
PaintToolSAI_1-2-0.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PaintToolSAI_1-2-0.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
PaintToolSAI_1-2-0.exe
-
Size
2.1MB
-
MD5
921a8cb82430236012c4be7705ceab18
-
SHA1
7f854a576bfa46343bfdb3598c39fd286f3c98d7
-
SHA256
d57a76b71b189db7b44291cfe1eec876c9ed462cfd1ddc5faa14ec0a5babbeb4
-
SHA512
5269c94b064c617bfb32fea50957e74bd394191221264061f1f1fb143422f109629bcda55e617203799ec730ba6e92277bcc01ebae5976193beaa2be52b68e2c
-
SSDEEP
49152:V986H5UaT5iO2JQ/doSz1X/bNUIP+jmmoBT:z8eUaT5i5QV3ztbb+jD+
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-