General

  • Target
    Paint-Tool-SAI2.0.zip
  • Size 14.6MB
  • Sample260701-g2vhvsfx6k
  • SHA256 fd8f8d2dffe33e9d31f059016bb18f5fc54df4bbbfab09b04227e149c99376aa
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Paint Tool SAI 2.0 (64bit)/blotmap/Grainy.bmp
    • Size 65KB
    • SHA256 58f80a5b55e3da89a0ed704e13b3232039073a252c167e01ebc9d7b93f4d2f45
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Paint Tool SAI 2.0 (64bit)/sai2.bak
    • Size 5.0MB
    • SHA256 089602190aab0ed17809ea09aed6edc681560fba73aaedb2f2b085cc26a2584f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      Paint Tool SAI 2.0 (64bit)/sai2.exe
    • Size 5.1MB
    • SHA256 098b464cdf6b77fbd9f7157148cbe104d31d1b99c62950d93d104f6f072bcd2e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks