3f481fe4daa6908a933196fb0b6dd7fc5087709d81353ccde30762b036f40c91

Resubmissions

28/06/2026, 00:27

260628-ar2qvsew6m

28/06/2026, 00:18

260628-al1xdaev3s5

Sharing

Copy URL Twitter E-mail

General

Target
Clip Studio Paint EX v5.0.0.zip
Size 522.5MB
Sample260628-al1xdaev3s
SHA256 3f481fe4daa6908a933196fb0b6dd7fc5087709d81353ccde30762b036f40c91
MD5 24af85bee85e5aea41a4497c0c64011b
SHA1 5ccfdc747b729c97cb5f925c214e870cbad5a4ac
SHA512 ea2c5cfd47675bc0d43b183b0be18ccc227f8484090b3d337246818aa8693dff444845ff096e843c75b1808aa06a54708fde7e27dde2b76e6d74e04206ba497b
SSDEEP 12582912:0oPLl9+YI9CfnOpPTRMYPyWTrrNVMKgLFmrkDdosTUV/0wrG:0oPj+D9CfnOpLWYPlTrrNVMLmZsI+
TLSH
T1BF4933CD75EB9FC0642F902EBF2945063502748AB13E9DB862E16794ED7D62336CEC81
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  Clip Studio Paint EX v5.0.0.zip
- Size 522.5MB
- SHA256 3f481fe4daa6908a933196fb0b6dd7fc5087709d81353ccde30762b036f40c91
- MD5 24af85bee85e5aea41a4497c0c64011b
- SHA1 5ccfdc747b729c97cb5f925c214e870cbad5a4ac
- SHA512 ea2c5cfd47675bc0d43b183b0be18ccc227f8484090b3d337246818aa8693dff444845ff096e843c75b1808aa06a54708fde7e27dde2b76e6d74e04206ba497b
- SSDEEP 12582912:0oPLl9+YI9CfnOpPTRMYPyWTrrNVMKgLFmrkDdosTUV/0wrG:0oPj+D9CfnOpLWYPlTrrNVMLmZsI+
- TLSH
  T1BF4933CD75EB9FC0642F902EBF2945063502748AB13E9DB862E16794ED7D62336CEC81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Clip Studio Paint EX v5.0.0/CSP_500w_setup.exe
- Size 462.9MB
- SHA256 b48251870701a944450d642a3d366ee56ec2e8144ad3291acd68809c3a4df7c2
- MD5 516c73acf581e1971703f2cb73a7b18b
- SHA1 ef12f2b5a79497a8a4fbce2e470a386073442c45
- SHA512 f3302aa24438fcdb735f1da4fb2726103c4fe2607cf94650dac9c9b3bcd92ce20836b78e02bcacd1fce907cc256ab7441c3d824b70e114a4256d229476ae016c
- SSDEEP 12582912:tQ7rPN45y+dPPgjrafCxObiF/pkZ2VF0Uvh2Pc8xO:tQ7J4w+dPPgjrNQbiF/m40jcV
- TLSH
  T1E8393327A185891EE5BB0331EEAF4E52B6613C332731848B7290FF581CF16D27D67A16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery persistence privilege_escalation ransomware
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral2
- Target
  Clip Studio Paint EX v5.0.0/Patch1/Anti-Resale. Proudly brought to you by bbs.itzmx.com. This patch is absolutely free! Please do not purchase it.txt
- Size 654B
- SHA256 0e28d41958b1151f044c3003a8fd6f52d5a05b4ff1607e2580955fbf34caf298
- MD5 19b5688c3fcb245ef89506cdae915601
- SHA1 e9e122dbba6003bb05df1abf29bc8c2f1ea7e9d1
- SHA512 f2d9b06beaffb61c2935a334b013a13e574273a0f8bbb05d6b8a23d9fc3255af4dd340983f34875f95cae5732f2e71afd3b0ddda41d96fc6d97937a8657ca1f1
- TLSH
  T11EF0D32FEFB217790F1111C41C0AAF65F6463CE1AB5657C57F55E0043359D0F458486E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3
- Target
  Clip Studio Paint EX v5.0.0/Patch1/CLIPStudioPaint.exe
- Size 36.7MB
- SHA256 cd27de50e20aef9a3eccbb21d4c52d9044c59e3a6dea5dfc0d7638f5ad2709cd
- MD5 c8bc97c9c77e46dd255820983d4b93e6
- SHA1 e545da1b626cad3186f3798e2dee0b03255e471a
- SHA512 6b6465fc747fd6592c51c97eaae8496fbe78a33936258ba3a8bb850d322fcb8ae57371b2747d9a7f811706be0f18600135c4d9ec5f935fc65d0d869e82903922
- SSDEEP 786432:Fo3q2Lv6tRwESF6oewu0To1i7GBzTm7hWTbnoi:FXDdwu0OHBnZJ
- TLSH
  T11A870115BBC8E0C4CA1AB1F4919957F312DDED6DDAA0210FF1897D9C3DB238E10A69C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  Clip Studio Paint EX v5.0.0/Patch1/【防倒卖】bbs.itzmx.com荣誉出品。本补丁完全免费！请勿购买！如发现贩卖，请退款差评举报！.txt
- Size 553B
- SHA256 66d5425ea2b87722699632f85b2e10801b38be575cae6284fcf0a2bfe2bb55f3
- MD5 7fc782e4d9dd756b9abef49460918a86
- SHA1 86674b53bd2bd3aa8df06c6b59c18003ffb2166c
- SHA512 27d5e109a8b01cff787a69fb7c84dce5392a76059f8a74a1195482ec40909da89608e8b85c813f964681b4f498cd23fd6a49e861595258620fa74e52af964c53
- TLSH
  T1C9F0202FBB7326380D2120C01D0AFFA9F50C3CE0AC529B84BE15A048336A61F8480C3E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5
- Target
  Clip Studio Paint EX v5.0.0/Patch2/Anti-Resale. Proudly brought to you by bbs.itzmx.com. This patch is absolutely free! Please do not purchase it.txt
- Size 654B
- SHA256 0e28d41958b1151f044c3003a8fd6f52d5a05b4ff1607e2580955fbf34caf298
- MD5 19b5688c3fcb245ef89506cdae915601
- SHA1 e9e122dbba6003bb05df1abf29bc8c2f1ea7e9d1
- SHA512 f2d9b06beaffb61c2935a334b013a13e574273a0f8bbb05d6b8a23d9fc3255af4dd340983f34875f95cae5732f2e71afd3b0ddda41d96fc6d97937a8657ca1f1
- TLSH
  T11EF0D32FEFB217790F1111C41C0AAF65F6463CE1AB5657C57F55E0043359D0F458486E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral6
- Target
  Clip Studio Paint EX v5.0.0/Patch2/CLIPStudioPaint.exe
- Size 35.4MB
- SHA256 a464835458aea1f82d56f949a1589021e755c9f6334cbdd395a4e878b9f8e91a
- MD5 7fbab0f9a1fec8ff431208f3f9c3d155
- SHA1 3249b64519e61aea21679ea02c40c326e8554a06
- SHA512 d0df158940a6857b2a75e9b7d2fc24648e486b44dea39c75956599fb15cdaa83ee803795412bb2d2600aa7ae743b55b6e32fde946b52a835a032f638cf27153f
- SSDEEP 786432:v+xIVwSN43NLV+D0MG0VQ25+R8hGBARJXyW8VPqAimS/UV1hW8:2xIXNKDCQ2QR8hqARn8VPAk
- TLSH
  T1D787F115BBC8E0C0CA1AB5F4D19957F712DDED6DDAA0200FB1897D9C3DB238E10A69C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  Clip Studio Paint EX v5.0.0/Patch2/【防倒卖】bbs.itzmx.com荣誉出品。本补丁完全免费！请勿购买！如发现贩卖，请退款差评举报！.txt
- Size 553B
- SHA256 66d5425ea2b87722699632f85b2e10801b38be575cae6284fcf0a2bfe2bb55f3
- MD5 7fc782e4d9dd756b9abef49460918a86
- SHA1 86674b53bd2bd3aa8df06c6b59c18003ffb2166c
- SHA512 27d5e109a8b01cff787a69fb7c84dce5392a76059f8a74a1195482ec40909da89608e8b85c813f964681b4f498cd23fd6a49e861595258620fa74e52af964c53
- TLSH
  T1C9F0202FBB7326380D2120C01D0AFFA9F50C3CE0AC529B84BE15A048336A61F8480C3E
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral8
- Target
  Clip Studio Paint EX v5.0.0/README.txt
- Size 2KB
- SHA256 7dcd7e5fb92ee2b55028912e0d132322b7ab631a7b7e448e1cecbfb613b421f8
- MD5 92266554b8bea16c4d8f05c055604a2e
- SHA1 548122d86d0e46bd3ffda9325fb9568ef8f83d19
- SHA512 dc7a481d83195f61100e9c5650e59b1d572fedac2072601abc75556f84248d7a90228b8d411b03dab9893d85e8e30ef4bad5d0507eeecb8696de776cfbedaad6
- TLSH
  T16141C6306BD6A0680422208FAE0A3D08F5B724FD1F768B89385D2A6DB1C0769415F97D
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral9
- Target
  Clip Studio Paint EX v5.0.0/START PASSWORD.txt
- Size 122B
- SHA256 2b5d354a82dc23e8fbd1cdff4f41e8e71ece24f660137541a301fdc77c99347a
- MD5 e1fb0fd13061d7ec2450f95ec17b8cd2
- SHA1 ae73e46df2068fbc21598ab95f4931ec91c07e72
- SHA512 b60c3ac2433a69ebf95dce047db0719a769d72c749617011938bad145cda6e9f170fb55d0b6a9fed89d9634b204b6563a3b0875778d338a9e5d318a4013d619b
- TLSH
  T1BEB09B53FF74503D113204C01D095DBDF01554D191958F855D4D70413385A5F5CD4875
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral10
- Target
  Clip Studio Paint EX v5.0.0/TURN THIS OFF step 1.png
- Size 91KB
- SHA256 a159e3aa8a4db8a28ec84d5e02c999bb8bcb2e9a6a496176b40232d77a328e17
- MD5 1417083a464c0b1a5a4fce739841cdc9
- SHA1 9b3bbc3a6fbcb09bbaf9f679e430bed550a626be
- SHA512 2f5827ffecacfec5aea82549d03e51870b92075be3ea68bb4f6dd844eb975c6e2d88a33cc77eed3998be72ead56dfd58d733619bf0361e3eddd08cbe46141efb
- SSDEEP 1536:btDUUsAIJc+O7wph3MXVjgTEFg179ioB9NGVEWnTsip:5DhsAIJc+VkuTKmB98VRp
- TLSH
  T1F293BF90CD51F46FC319C6F989705EC726E29AF2ACCC158093BB6535CE24866A063EFD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Clip Studio Paint EX v5.0.0/TURN THIS OFF step 2.png
- Size 18KB
- SHA256 68a7df78102f45934d6ba9340c12837080ab1a93194716d93887f794aa496f37
- MD5 ef71755cbab72d88b357f7c0da60cad5
- SHA1 c65cdbc3766a0e69b0f73826d874adb4df8d4185
- SHA512 b3b4d8371fa7cd3dbccc1a4a8597abaa6bc8a4e760768f4780e1e3ec56b26e1dcea8cf826cad5e336eebaeccff80f77ca9479e9409fc171968d28e9a23d06bf1
- SSDEEP 384:ON8dkhBNQqIRkff1P/1aodymiYzIOrwqR/:dd8OqtXF/TMmiYIix/
- TLSH
  T19F828CC9DA0D51A4E3B084DD28DAB37632FC6D034D6E630286DE61242F5D2DA1E367DE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Event Triggered Execution: Component Object Model Hijacking

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12