Analysis
- user interaction
yes - max time kernel
150s - max time network
152s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
04/06/2026, 03:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TomodachiDrawer.UI.Avalonia.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
TomodachiDrawer.UI.Avalonia.exe
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target TomodachiDrawer.UI.Avalonia.exe
- Size 43.4MB
- Sample260604-eas5lsax3r
- SHA256 07a7a3bcd997dc707eb3081b63710430a8de9e9b50bf9d084c23935eeabbbd91
- MD5 a4b96fbc391295568747caf5cf152a3b
- SHA1 9583e926f3c5264a5f71d08c839cf319a4eb7a5e
- SHA512 31264a249bbb56511d14fe21cdcae2722789047635a10cf3297960bcf49e16fa50518cc7d55d93897edeffd226ebf95cf21e3f1f9411fac244c2031cc80e0741
- SSDEEP 786432:eIpZDOIF+BeoTYUA7qSvcPv+2H7soEN+IOHOjueNnxjNoibzZ9:eI3DOIwxYUA7qSv4v+IEN+xASiPZ9
- TLSH T15DA71256E2FD00ECD4BAC0B8C6574517EBB274551330ABEB12A48A292F37BE16E7D311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 6072 TomodachiDrawer.UI.Avalonia.exe 6072 TomodachiDrawer.UI.Avalonia.exe 6072 TomodachiDrawer.UI.Avalonia.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 6072 TomodachiDrawer.UI.Avalonia.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\TomodachiDrawer.UI.Avalonia\sjMp75oDgqCW\av_libglesv2.dll
- Size 5.1MB
- SHA256 53191a77fe783cd757ca7767077c2a64a662e7043777a5b4ab74980d4a0b73e3
- MD5 e6198925c32669264eb2a37a5c5706bb
- SHA1 f2bad0cfc40bc642dfcd7242c3fcfe736b617eab
- SHA512 d2836c7335e70171d2dc0e143b9752b1d4947d3b6fe424c2078118aeabf12ac008b7be91adcba6e2616e143c5732afa6a0089f412a5e2d97a3ad76aed6c99aa7
- SSDEEP 49152:UrRhIIcDUAsu5h76YosYgIiiHtY+52ZKLArXaqxRyiEIrYeoEFjWhM+/9+XmEFqZ:aiQsmz2ZdKMyiEIrYeoRnL6Uyfq
- TLSH T190467C03F29250DEC41DD278875B9223F635B8450725B6DF26A893252F77FE06B3AB24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\TomodachiDrawer.UI.Avalonia\sjMp75oDgqCW\libHarfBuzzSharp.dll
- Size 1.7MB
- SHA256 145ade963eba427027d5e1381db5d51a0ef9e98e9fef9efbfa6074ca20da246f
- MD5 fdfc5facbb8d7ed52bcfeda911586cd6
- SHA1 ae248fd8f3e3df80bab5dacdc098a0a7136ba94d
- SHA512 d49b78bda3a0e70e5b70eb537ce5cf28b00c5578d8edd2e5bd0e9b8dbc3e6cb983bb5ea38dfda0170ff2851fecd78e702c00c7483628d920527546e94903a5b1
- SSDEEP 49152:48lOq9ewF9RTbAsC0e+yPWojc7dGl09x4HJg:I2dclAJ
- TLSH T19C85AE4AE2AA10E9D9BFC078D666950BE7A274050314DFEF25E08695EF23FF5167E300
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\TomodachiDrawer.UI.Avalonia\sjMp75oDgqCW\libSkiaSharp.dll
- Size 11.1MB
- SHA256 7dec3ba900ab353491e6446f0083739924c6f8dd668832e2f09d38ebffdbbe1c
- MD5 7b0859b4d5a23d2436bd165f86bf9d4c
- SHA1 a8cb4ecdca12e2b07974b0478c9f5494e283d784
- SHA512 0b87163b211c0da87af194f9438d397489e2a9d550b4f56613ce8e44ea7a48d3676fbb8161fe72050401618e69eefa7da12c0f7a3d7634ad78c461a572409de0
- SSDEEP 98304:51DUue0xnR1JG+VyXb0UDfgFTdbkLhQgPLSmrQ7zMEGFD:51DVUDoPkOgPLS5MEGFD
- TLSH T1FCC65C02769B54BDC44AC4B4934B5A67AD2434CB0B35BCEF418592393FBABF42F39618
- MD5 SHA1 SHA512 SSDEEP TLSH