General
- Target Paint-Tool-SAI2.0.zip
- Size 14.6MB
- Sample260701-g2vhvsfx6k
- SHA256 fd8f8d2dffe33e9d31f059016bb18f5fc54df4bbbfab09b04227e149c99376aa
- MD5 d01ae8cc50038f82cbd4de7f313c5396
- SHA1 d1b225a73879ab660be147719d2ec1a6e5a0d149
- SHA512 d8d152df1a12eb17a21343672d817a3058a1ba3905c84ffa43fc68681d83fc71a4f1e3da93b41d765681dfd3fadb4ad5b6c9e7d443a4e8732fb46257af38b4b1
- SSDEEP 393216:gxDNrRRwjqlLtEqhQzQdpwYMhizgNq/2ukdxEkrre:gxJrRRwj4LqGbwBhdS+re
- TLSH T1EDF63320F5152795C354D26BAB9435A81E7C18D6E12AEBB80C1BDA58BF072F71D2FC0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Paint Tool SAI 2.0 (64bit)/blotmap/Grainy.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Paint Tool SAI 2.0 (64bit)/blotmap/Grainy.ps1
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral3
Sample
Paint Tool SAI 2.0 (64bit)/sai2.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Paint Tool SAI 2.0 (64bit)/sai2.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral5
Sample
Paint Tool SAI 2.0 (64bit)/sai2.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Paint Tool SAI 2.0 (64bit)/sai2.exe
Resource
win11ltsc2024-20260629-en
Malware Config
Targets
-
- Target Paint Tool SAI 2.0 (64bit)/blotmap/Grainy.bmp
- Size 65KB
- SHA256 58f80a5b55e3da89a0ed704e13b3232039073a252c167e01ebc9d7b93f4d2f45
- MD5 8d441cf210ceb15e85bfd2444898962f
- SHA1 a8e30c48e1f87268e0290bc1011f97aedd482bb0
- SHA512 456dae6b410828d9eeea102386a2e23663773af0235e55f59999c19f5c9e8fb29a94561ba5806b1b69c3a9cfca4607f92a10544eb04832a5dc375bf0956a949e
- SSDEEP 1536:rQDsSM4JLdE7oY+/H3ll5imLNMuFK1lOis3kpydxoPDifgep:sISMIpNY+f3lDnL7FalOis3ddxualp
- TLSH T1A053E17280854CE56E5E357737429B1B93E8A93FBDB4B014470ABAE78FBF890860941D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Paint Tool SAI 2.0 (64bit)/sai2.bak
- Size 5.0MB
- SHA256 089602190aab0ed17809ea09aed6edc681560fba73aaedb2f2b085cc26a2584f
- MD5 456fffc27c16c75f4f418f21e623c72f
- SHA1 027d4d7823f7cd1c99cf2d45376bfa2826439f3b
- SHA512 9351cb62a45c1ef516ec6902ea80ee1de0ae4bb603c0ea25f1ad1bf4273f39f9591d6e6ecb12be85179a64c185229bd06752ab2e11670fdb817416780170846c
- SSDEEP 49152:gyAnaNojdMnadvoa1JJ5Npu88s/wQAYToX6NU+TbSwx:2ua1PKwx
- TLSH T106363F41E2489896E41FAC309254E7BA6A203C49435195C72BBABF577BF3381BC39F74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Paint Tool SAI 2.0 (64bit)/sai2.exe
- Size 5.1MB
- SHA256 098b464cdf6b77fbd9f7157148cbe104d31d1b99c62950d93d104f6f072bcd2e
- MD5 6c8d18373a759082e388a4c8b8f5f904
- SHA1 24cc65eda681c5320b7b14522b8d7f5ac4cd0877
- SHA512 7bc23050fb1f1720edb8a76b9ffbfc20d75f557e8fef6e1f7989ef96d18d30c87f5826a0dda09b3a008a59c39c159b0f733c2a4afb411b631c473215f6f3cb8b
- SSDEEP 49152:2yAnaNojdMnapvoa1JJ5Npu88s/wQAYToF6NUHTbSw6c:cua5RRw
- TLSH T108464F41E2489896E41FAC309254E7BA6A203C49435195C72BBABF577BF3381BC39F74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10