2366b602630b6a02882b4ad0d65138952ab9fdc878e188f65329d931f0c1bfe4

Sharing

Copy URL Twitter E-mail

General

Target
Microsoft.MSPaint_2024.2405.19017.0_neutral_~_8wekyb3d8bbwe.AppxBundle
Size 64.5MB
Sample260604-ejznraax8q
SHA256 2366b602630b6a02882b4ad0d65138952ab9fdc878e188f65329d931f0c1bfe4
MD5 e1b5b6ea092c6d47be52faa1c8ccd752
SHA1 57399e258dcf432bffe75e7bcceb0bc1a445fd56
SHA512 b10a554a3ce5898ec4bf3e3dfef58497737c0c2dc149d3d47197a75218e187e8560040873dc0524a5479f39b3f52486a941d41666c1a99a3415d85974da8ef09
SSDEEP 1572864:qUNXSgSWOjaZyeNb52P1kpCgSWe4QYBSYDpPjzfaQT2hmgSWKoOP40/5fm:qU5S1WZyAb5s1SC1WeXZYNPjpT0m1W73
TLSH
T129E733F56312ACC3C47D4F3140AB1EE0A4A0C1755AF0D61281676A3C2999FEEAD15F9F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  Microsoft.MSPaint_2024.2405.19017.0_neutral_~_8wekyb3d8bbwe.AppxBundle
- Size 64.5MB
- SHA256 2366b602630b6a02882b4ad0d65138952ab9fdc878e188f65329d931f0c1bfe4
- MD5 e1b5b6ea092c6d47be52faa1c8ccd752
- SHA1 57399e258dcf432bffe75e7bcceb0bc1a445fd56
- SHA512 b10a554a3ce5898ec4bf3e3dfef58497737c0c2dc149d3d47197a75218e187e8560040873dc0524a5479f39b3f52486a941d41666c1a99a3415d85974da8ef09
- SSDEEP 1572864:qUNXSgSWOjaZyeNb52P1kpCgSWe4QYBSYDpPjzfaQT2hmgSWKoOP40/5fm:qU5S1WZyAb5s1SC1WeXZYNPjpT0m1W73
- TLSH
  T129E733F56312ACC3C47D4F3140AB1EE0A4A0C1755AF0D61281676A3C2999FEEAD15F9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  AppxBlockMap.xml
- Size 340B
- SHA256 1c14208291e14783f173c81e549334f7c554e2c055a55506b542d3497c072c6a
- MD5 986c403adc3536b27f5b81c7a659de95
- SHA1 9206f52cea37b6a04fbaa45bfe55b3d8473fc9e8
- SHA512 f826ae4bf9594bd6c29f079cae4a77a5d60a516ab9702f6763511ead16594b014d556b1057873bdfca991763686360046d5954f069a38ca9cf5c8aba3fd6efee
- TLSH
  T188E02648D269BC32456A8FA85BBDE1047A5292A7005A89A5DCD7CD2A187A0C115293A9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  AppxMetadata/AppxBundleManifest.xml
- Size 16KB
- SHA256 7e28187a5b0beed7927478dbe21fea26f1a41786fb16554666228bbe832b2b9d
- MD5 700a3576558c638bb9b438ac9a85b805
- SHA1 1500c34627f8e16823a957bfe0184ddc3abfba55
- SHA512 d7a272f12889a397e9bd0d26afc6029f0d5e0b1c00ced30c8d5bc4ce08b40566ee749341b4c06ec1efbe014c27eec67dcd3319ad81c287d7eb97228b45aedef9
- SSDEEP 384:ytmHIIJqmHIIJEAmHIId7yLvg21SeJR/ADx9bqxH8FHZeTb6Nb9rxZb5K4ETEPvK:MmoDmolAmoo7yLvg21SeJR/ADx9bqxcS
- TLSH
  T118728B26716C3C7C2630154FB2352D81615BDB78AC646928CBFBFC3BABE7A8D1490A54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral5 behavioral6
- Target
  AppxMetadata/Stub/Paint3DStub_1.0.74.0_ARM.appx
- Size 729KB
- SHA256 0b9c9178122f61e29864899309e12c9a3b99fdb68ea0f6b29218b734e376e694
- MD5 99681b2b6ac71e862ebd0b986582ee07
- SHA1 6014d2e69f4d00d24e0bb5f48d699cd505e1d325
- SHA512 191ba2dd7be05ad2f42c7f48360dfb6787c31af3e40e2058997674575074ea249617ef2daf51bbca966cc8cf204dca1d8a521c53b442a670e1a276e31382e079
- SSDEEP 12288:aMoCkjxp2sCYy5e2WeEzwAzr9cHxC7Um+HFId97WoKAQl:hktp2s5Oe2WeEzP/qR4+k7FE
- TLSH
  T19DF423E2CB12DDE3C5BC5E74810B1DB4B8F856156ED0C51392B7BA782C81AE42D78E8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  AppxMetadata/Stub/Paint3DStub_1.0.74.0_Win32.appx
- Size 720KB
- SHA256 05b86383c76679034b9783b8891bef24c85e566b026ee21f8a09d6e5a35eec99
- MD5 785d65eb6bb55a3f131e6f302336ff14
- SHA1 241833dbd2757b8629157a32bd012fab6c2ad8f6
- SHA512 0c5ce70da7cbd29cc63972dcc3a4e857fdb21d13e02d2ffc75f3e15039d1a4b2e079cfe75e3a441c6586bc919d81fcfc21b0778ef797606214a53e4c2e65cd80
- SSDEEP 12288:DOGLhzBNgenz1AzBfN9jonR1Sne2OpapOajdu:DOohzBNgenz29VponLSnbOpapOajU
- TLSH
  T140F423F2C742CDD3C5BC9B71406B1DB4B8B886069FE5D52281BBA93C6443B60ADB4D8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  AppxMetadata/Stub/Paint3DStub_1.0.74.0_x64.appx
- Size 723KB
- SHA256 9f8a37c74e47402622b0ebf39883e7fcfcf8c99e5f24f50faca7611bf92fed0d
- MD5 2ab90cebc0ed8db10656a5f18c97355c
- SHA1 28aa03e086bff6b43402d77b27c2c77caa564a37
- SHA512 0fb7d3abbc0c2e6c0537b0c3459c024032e5e88db3f65b9d4025e5c60a803e037efe53248411119a67f6e784dee52d5ecfb77b9be5fc6847f45e854814165a4b
- SSDEEP 12288:1BZ50xr2pSxyNGld8qNI43aYN9XcD26e4vn+6Qz+aAzi5Y9Kz9tC7lQlsHWoLGto:1BZ50xr2pqv8qNI43aYN9XcD26e4vn+e
- TLSH
  T1E2F423E2C7529DD3C86C8F7140171E74FDF941086FD0D72281F7A92C7982AA4AE69E8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  AppxSignature.p7x
- Size 11KB
- SHA256 3ffdf616e1825ad8833d75b493f5425f6c5db44346975b456b16adc7ffc33102
- MD5 6d747dbe6fdabd2f6dabf90cad9d5bc2
- SHA1 1b219fbcd5f3b3fa7279de5f302fce5e583b5504
- SHA512 9b6628fa9810ba640bc2e73ec4980caf3302983a7856f577ce0ddcbdc0038bb220678badf63fa379ee315cf8000242c387d9e9cfc94caca3c26285c76bf26b1b
- SSDEEP 192:OlcpgjIiJFg9LCBeZMG/98h/MoTHW909owcLK+X01k9z3Aq693vqu:AjIi3g9mBed/id/Tw096R9zZAZ
- TLSH
  T117424CE69E7C81C2CEDB7C80A3D8EE977C3D97C7295094661666E9840CE77C5A70883C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  PaintStudio.View_6.2405.19017.0_ARM.appx
- Size 21.0MB
- SHA256 487c4f77cc0ba58fea4ac8096b71da9feedf8a986aad4a5929aef38d97c06463
- MD5 553dabfe2a2a8f9075920aad91226964
- SHA1 433389e624fd672dd7b99c0825a8bf9ff76658a0
- SHA512 535c98249aa1f775b05de565cb8b7b8261ec806c04beccfc86b7d33e46bdcd78824b6bffa09de177cc67752044e39d8de151d0e6bfb794a2f4504cfc01c87168
- SSDEEP 393216:/qhUXENBJbSgSWwpWBcTv9ZbsmdJefZe647nw9zhF7AUUFc1W7H/f4Rz9XMZGf:tUNBRSgSWrCTv9ZI6JefZy7Ss4WMR5XJ
- TLSH
  T13227337C361678CBCC5D5E7081E71B50A4628070A9A1BE1912662F3C1D4EFCA9E91FEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Assets/Images/HelpAndFeedback/BlogThumbnail.png
- Size 11KB
- SHA256 9791af11fbefe23da8f412dc0e658307aec4077eeb5e1c56798744e8aa208518
- MD5 c75339e76e27f1cdd4e23a90d81539a6
- SHA1 ef621e7234d2662334563e84de8fada381cd6ffa
- SHA512 aa6198b4a70abaa8f7dc56be5a7f1489cfc5e1a66212ee36971ebabe6dbfd40c86deff34a5faa60ffb9fda5850af0f1f548aa16014af14ea034c1ddca69b16bb
- SSDEEP 192:H7Ffaj+vARm7vd2ImbJbsaRn7Hi8HIi81Em6qr6qra+shJMoz5jUzoQ1:HoNRmTUlba09CG+r6aq/Zz5RG
- TLSH
  T13942C0CA7D01A7B21EF6A6D8A7EA0317D0B75189BB28B40C1F48A475B774918748C5CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Assets/Images/HelpAndFeedback/FeedbackThumbnail.png
- Size 16KB
- SHA256 72faa9e73350936c9cf2c1723d8416f88f2ba4e2b718f7e208b8e3211393c1c2
- MD5 ffd72bf0abd20b63bddc2fefa7252bb5
- SHA1 bbb63f087900596cf95e7d7f118358f25ef4347d
- SHA512 1a4345f83b218bffd77c435244f4f1ef77f0d47d001d62c4366dfc4038254087894f695a038cdd5dce650c5468af67e0c3fb4d492da65c602e5f99f1b2df2df8
- SSDEEP 384:Zf88D4TKM+VezPLLjaZNPfplmhXLX1Em4E:ZE8se7Vwnj8Pfpl4XLXimd
- TLSH
  T18E72C067EAC0AE430EA368820582666004FF9C8D6455F0E43487C6DB6E9AD3959FCDA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Assets/Images/HelpAndFeedback/HelpThumbnail.png
- Size 12KB
- SHA256 cb22aac3f2aefe1c3a59b206b4c8e1171fcf2787b8b8a7870747434eaf6eda71
- MD5 db294c4e938bee793d8db237f7c12622
- SHA1 1def0d262e76801e7f7c9f3d2d295da81fdbbbf1
- SHA512 efacf37c9fe1b1a0086ff2d5615ebc9891f1c409f2284a2e48c66dd00b2be01f77aee3b5009bd17df8b12059eca0ca52bbf117bd0c306fb3565bb8e5a6c83141
- SSDEEP 192:Z7FPIvdX/nyrPATgGRiuYM5Jfsql4wDZGJ5DtkWlh/4D+rDCt3dpovyWTMMfBViC:ZSKPggGF1sqlrUkeQDmCt3dpjyBwQD
- TLSH
  T11442CFE4F147FC31CA9D8701C8F9F0BEE9EE88504AC5581B699DD642CB390962662C7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Assets/Images/HelpAndFeedback/VideoThumbnail.png
- Size 17KB
- SHA256 c6d3ef4d20a854e3cea3bee5c8bec037435edee0915f49db1a654e66b781b4ea
- MD5 32c79f7a731fac20ac8e90d5bbf14f4c
- SHA1 3b4b562ca9a31f8a419fabd704480f70267f754b
- SHA512 e5d75963fa2a7a09c60e368906d284eab490d0ced0a0f9e30d5203fba54064181092d1d6771049cc4fdc3e43c4a33bddf204b26dcbbe8f556b8c756e4d97a744
- SSDEEP 384:HbgKJHeytPP2c4valLV/8kkYftHSp+WvzvhK6tgo1JoG/vpvNdXySv:HbN+e2HvwLVHHHSTvzh9vpvv
- TLSH
  T11382E00CB63F305DD32B25FCA27DD6779E8629A559888DB1FBCA01407974B26EB810C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Assets/Images/SmartSelect/AddStroke_Illustration.png
- Size 37KB
- SHA256 114b9890922998e82b4192ab1ba64cde22a15d52307cd31858f31f48b247dd23
- MD5 798b317894ab0b4a797df9fb6e7d2a58
- SHA1 aae8e76ebe36b87156c3f084d49132b7fe2ce082
- SHA512 c2d434b0e9e9bc3e2ce2fbc6fbc4e18d506cfa0b8627c8bb55b2adbd6e9336852689c873f780e3d3478418944ef7e8b8f13f6e2a31cacc04aa2276aaddd719e4
- SSDEEP 768:rGKOl00CxJ1U5jmACixgEodwB2HbzSrl6B1O5Ah:2G0C65V1xg9xHKlQ1+G
- TLSH
  T1FD03F1337327624E8F0D8E51DFBD5AD0DD3BB53766BC922C79525E2CD88B826510E824
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Assets/Images/SmartSelect/RemoveStroke_Illustration.png
- Size 35KB
- SHA256 0b00a14ccfde57f4d06183d95a37cbbc1b9bd456ec62fde2bcb222046dba623f
- MD5 bee5a5cfca506429761f92dcd88823a1
- SHA1 2145e1639e12d52fbe3a8b5a963f0712cfd1952b
- SHA512 5ccc4a677106e932f07d329568a93b2ba6ba90b21ac1552ded6b378e8db07715676e9bad4a19203da6f90ec379daba37d0930ec814d6bc71b5e085ba12c5b4ba
- SSDEEP 768:fZGBg5M0Mpvpo9f5XwsTZeEbg3f/s+k9ezjwcq:f8q5M0MEws0e5Z
- TLSH
  T1B9F2F29B1304CC6EF755CEBEFE0A83D51D5EA3846830974AA2A37F4460A750B5B4D0DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Assets/Images/Stickers/Custom_Sticker_Checkerboard.png
- Size 313B
- SHA256 46b564df34ff8f6707bbccd56adf6c946766ecf36c42f56a46def1de9f5b8a4a
- MD5 ece2031eea87482e13b9dc52b502c51c
- SHA1 a5f5bb954f65b73f18b7866eead06af3c384c65f
- SHA512 6e2a108ba76f9717a6d8e8fa723765a4b7ab2c10f274d75cce76ab79dc1dfe552ebe6436ac9968a8c0597c1b95ae60122b3157fab1082f2178aa809df78c3097
- TLSH
  T1E7E0C2A46AE00B7A029FFA3222F835174B3BC58401B31D4E3A0FC010CD182E1C58BA83
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Assets/Images/Stickers/Sticker_Bark.dxt
- Size 256KB
- SHA256 b3251c3663f7d143202a23652021c2c06d9c232657a35d472c9fb86fb2d99588
- MD5 b7cf0964e8970323d7be0df7cb379e27
- SHA1 39aad3dc24cf7d7a3841d95069f06fad21f4b9ac
- SHA512 31f946ca635cbe51b8c520b9dae5b300991a3090127c46fc2f861f2bf2a376b623e0e80452c4e5aac6227b49560cd53031d0414e9839b54dc03aadcc27e147fd
- SSDEEP 6144:ErUECiVDptBz2r2vDVclP/i82bZc96tFMfkg/Neo3NM:ErUECiV92oyHUW8xeNg
- TLSH
  T1CD449D7372EDEB50E57E6F7899CAC39F43967D5A21980B97F2C08383ADA39245011BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32