a1db0ddb652a3b4f0725b01e12ac847cb89e4b984e2d14021c8574832c60eadc

General

Target
Clip Studio Paint EX 5.0.4 (x64).rar
Size 475.1MB
Sample260624-slqqhsds7p
SHA256 a1db0ddb652a3b4f0725b01e12ac847cb89e4b984e2d14021c8574832c60eadc
MD5 53397f55c8226723d13e37e0b98ea0fb
SHA1 df168d9a50bc704c29c44acf56d5116764160a9b
SHA512 3c81dc3b1ab0dad67f206c9234eadbeef50524a122eb492dfc19073403ed0c36c4bdf74380f477dfe0e5af1a37e3f3b1e343141cb1079b4b39c494de992b6add
SSDEEP 12582912:FTK4nSVOHu1BsBeMWIMkFT1iAkZkWxdwaERWKKDXJ3JFWWx:cCSVouvs07Q3fexdH8sDX5WU
TLSH
T1E639335EAE61B794093DA0FB6120CC6F63B6C6755DD9C48FE223138BE9D2C80E8459DC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  Clip Studio Paint EX 5.0.4 (x64).rar
- Size 475.1MB
- SHA256 a1db0ddb652a3b4f0725b01e12ac847cb89e4b984e2d14021c8574832c60eadc
- MD5 53397f55c8226723d13e37e0b98ea0fb
- SHA1 df168d9a50bc704c29c44acf56d5116764160a9b
- SHA512 3c81dc3b1ab0dad67f206c9234eadbeef50524a122eb492dfc19073403ed0c36c4bdf74380f477dfe0e5af1a37e3f3b1e343141cb1079b4b39c494de992b6add
- SSDEEP 12582912:FTK4nSVOHu1BsBeMWIMkFT1iAkZkWxdwaERWKKDXJ3JFWWx:cCSVouvs07Q3fexdH8sDX5WU
- TLSH
  T1E639335EAE61B794093DA0FB6120CC6F63B6C6755DD9C48FE223138BE9D2C80E8459DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  AppDoze.net.txt
- Size 40B
- SHA256 e8a95a0229180266a8488f4426a21c3ed2f9614f5b9d01a194c0871de7d50680
- MD5 2dd1226195391da5333d9bb15d84c984
- SHA1 27adc3755db62bb654721cca69f858e81010b0d1
- SHA512 eddc06ce797c0329dad6ccbb0eca29fedaa32f652716fb779c2903a28462f93e1b713135940eba86f228d7465726a891a183ee754a1cc6cb9f39e32cbdb31404
- MD5 SHA1 SHA512
Score

3^/10

ransomware
behavioral2
- Target
  Crack/CLIPStudioPaint.exe
- Size 88.6MB
- SHA256 2e08e084c7f2256d4bba1d6a5bfcdd3498b8cd026667e1952e116c56c9ac9a2a
- MD5 3a8d04f8e5c7aa56b8e1ef7af9c6f568
- SHA1 cfa0b824a824f1f95a8689074216b80e68607d0b
- SHA512 cc9f41c0a1cab7be669bc1d3963e4d4888f6145f79d1ed8be0f533e6bb0a124d40e4a276a93d5a7b9fab5b78af40b09677b08e30f812a22643a509d0392330f8
- SSDEEP 393216:B+y/o2XyqMLaUByBjnJNlqWs0YxjVBMYzkUZiMTLa6L5m+kB+jOVfUd8yNfMj3Qb:YylCDXAJBuNkfMFACzc3ca
- TLSH
  T133183B96B2A000D4E1B9C0B7CF599D13DBB1389A0731D7E70991F9A7AE77DF095BA200
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Crack/readme.txt
- Size 81B
- SHA256 9747274b713f69443b0fd645ec89f5da33d6e506212d5d37cc85c441a3935d6f
- MD5 e65ca719b60c2453f8494a1f8e7fb564
- SHA1 dff4107ccc70da7b6db78f24232b7fab34e410e9
- SHA512 84a1fe6dbb0a4f518af3dea6c2230dda402c95b354c80aeaeb4e1e2dfd8f3bb64acf9dc4512a76b62fd31edc4023f87198eab3f0d70337e2ab157212c85d2df8
- TLSH
  T19DA00140EDDAE2D02AB972564B143CA0A52A6C5C93461569AA49EA0EBA8851290590F5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

ransomware
behavioral4
- Target
  How to Install.txt
- Size 771B
- SHA256 4ff57464d50d10a55e2ecfb175da7e94e311c0f9f03caded791e1634c2a5cfec
- MD5 8a4fdda29685a9ed451dd55fd6cd3c7b
- SHA1 79151b54b6825794f779d639c5fad14b35c328e0
- SHA512 b7384786881907ed08be5e74a7d4fc644f316e2b998b5d40ad1a2f248b6bcd860a5c5f5229819bf5e3c77cba2d23872053dd9d240af71c6e51bc4a11ee39765b
- TLSH
  T10D0147EB1B4713E1632B62DB439E6984E13B800C6F93A9DB144AC25CE610F6DE3D25D9
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5
- Target
  Setup/CSP_504w_setup.exe
- Size 464.0MB
- SHA256 27749e99fdf92634a621ace485805eb53001985afc2a73ad20576ae7b8f7c3e6
- MD5 66374c164b0f6be8ebcd2e3046d9b97e
- SHA1 1c54779460993fc46e0e8d0a65e24c6a43531d70
- SHA512 9d3bae440802658f43bfb3fe841bf0677c005a474330dd59bccd34398b671ca8ca74d3d98482e1fc0d25adbcff1cbf20c7f8c2e56a4dbd7ed29ae9f79138bfdc
- SSDEEP 12582912:IQ7rPNKIlQm60dUypnOE0lfDPTF/pkZ2VF0U1h2Pc8xf:IQ7JKIGm601ifDPTF/m40XcU
- TLSH
  T107393317A5C4451EE5BB4231EEBF0D52BA713C236721888BB1D0FF686CF12C1B967A16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery persistence privilege_escalation ransomware
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral6