Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
17/05/2026, 09:15
Static task
static1
Behavioral task
behavioral1
Sample
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/sai2.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/sai2.exe
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/sai2.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Easy Paint Tool SAI 2/Paint Tool SAI 2 (64bit)/sai2.exe
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
Easy Paint Tool SAI 2/Tabletka/saicrack.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Easy Paint Tool SAI 2/Tabletka/saicrack.exe
Resource
win11-20260513-en
General
- Target Easy Paint Tool SAI 2/Paint Tool SAI 2 (32bit)/sai2.exe
- Size 4.8MB
- Sample260517-k71tlset3z
- SHA256 6fbccbdd23de9fca046d3d879f67c5ed7ed16df18714dfad201ba85662c93053
- MD5 58ff1f8ca642143ff5959b8e6ac7f960
- SHA1 f339aba119c39fece64fbe1aa0e5b2c3347ed8bc
- SHA512 2e4c687c7f0e3d0c4871631f4c1466f1be9b4695809477d10053244376cdf82666597b0b8a00eb9cc305a2b800b578f1c0b48bb01f6abe5a2b25fefede0b7660
- SSDEEP 49152:N1j290lPcYHeKABXvYAQsPifqVlKC+LZww1A3Its47rR4WHrxsT+:N1js0lPeKABXvYTsafnj8NWHNl
- TLSH T1433694016A48CC52F1171130F66C6BAE1EB46C890355E1CB27697F49FAF39C0AE76EB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language sai2.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2632 sai2.exe