2acbd443b9ab1bc9f327bae40b2840b2e63135c8d19086850f1b30ba8cc5a4be

Sharing

Copy URL Twitter E-mail

General

Target
Autodraw-win-x64-2024_10_17__19_11.zip
Size 20.7MB
Sample260706-wyeessft8p
SHA256 2acbd443b9ab1bc9f327bae40b2840b2e63135c8d19086850f1b30ba8cc5a4be
MD5 678c66c9df51ded6f79f4440879e45eb
SHA1 0355b042e852937f5956e8ba9d73c1500cd1e0f6
SHA512 56b9b0141208df91d72f4508bd73f900882f9af939b8c52ca767353770e47a8b8e3f27e5f4a2b0050444ccb6464a3c30b12b7ea978652e01dce2bbbdf0a293e2
SSDEEP 393216:UYemGuvO4dtQU5PJhuHJU/z+xwxAjZqTjjkwzNR0JdiR5gopFVGeFguI:OmGuvO4dCUoHa/z/EZqTjjTPWdw2oFGT
TLSH
T13227333CC18EBE997AF7A531B9CBC189BC98B2170DEA467EC62D605D1ECD413294E470
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Autodraw-win-x64-2024_10_17__19_11.zip
- Size 20.7MB
- SHA256 2acbd443b9ab1bc9f327bae40b2840b2e63135c8d19086850f1b30ba8cc5a4be
- MD5 678c66c9df51ded6f79f4440879e45eb
- SHA1 0355b042e852937f5956e8ba9d73c1500cd1e0f6
- SHA512 56b9b0141208df91d72f4508bd73f900882f9af939b8c52ca767353770e47a8b8e3f27e5f4a2b0050444ccb6464a3c30b12b7ea978652e01dce2bbbdf0a293e2
- SSDEEP 393216:UYemGuvO4dtQU5PJhuHJU/z+xwxAjZqTjjkwzNR0JdiR5gopFVGeFguI:OmGuvO4dCUoHa/z/EZqTjjTPWdw2oFGT
- TLSH
  T13227333CC18EBE997AF7A531B9CBC189BC98B2170DEA467EC62D605D1ECD413294E470
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2
- Target
  Autodraw/Styles/Anime/anime.axaml
- Size 1KB
- SHA256 ff0026d9c57d7788a68246f85e146d20039ad4fa792c579cd20042d5caf23d63
- MD5 933b14ec837902a7b08281cde656ef77
- SHA1 e814b84472d7c17a92191cf21fd41590090ab3fe
- SHA512 65ad02c70efcb1f6d0437de45ebb00a0a8954611fc5aa34b53bb25f18b20f58917f5932a1c3de7d484f39bc1f8a3ded600ba63d951f7c10e3a88e580161dd4d4
- TLSH
  T12431560382F68B29924B192485E0F591CE8801EF97745AC9367E323F9F6259203B3C73
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  Autodraw/Styles/Anime/character.png
- Size 679KB
- SHA256 dec79f7854d23af44d3a23a9623c55ce9ad9fe04f7ee9f56cb13ce5fa84a65ff
- MD5 95ce5bf493140caffc7d565e4be9d123
- SHA1 d1704b7c9afbac1af6665c7d6a583c94746397b3
- SHA512 791b98e8e2c10371682188dbe16cba8c3ca2c4a74d3089f733f449393f92fbc6a298d00964e7d06b324273534763b631d0d9b2d760e0fc20fe6fcccf68381bbc
- SSDEEP 12288:FwaPI859OvATxmeJ+lnz5E+hP1sCwU+IHcPuDFD7OewawqGh8OzqCi9:FHfavAVme8llE+HXw6HcPuDFXdZGhSCw
- TLSH
  T1B9E423247FC5FC625558724BC4796E010F3A59CD6CAA443AF69A0ECF7873A90D05BEE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Autodraw/Styles/Landscape/landscape.axaml
- Size 1KB
- SHA256 69380e4ebe4f1430b9e123b0f0f680ee903b89a08761c216e08cb33d53732170
- MD5 af07d8d58e5485e39285d832f7848e55
- SHA1 887f94bfcb32cc961be5e8804178e725d90c6696
- SHA512 75fd5401fa5fcc4e81e32b6f99f8265cffa347da934b66443540ee7bbf4aeb53f3564f1a6ac7e0afede536d492bf83495ef65414acde194665ed73655aa039a3
- TLSH
  T12E31481382F78B2AA64F592495E0F591CE4801AF87B45AC9362E363F9F2159603B3C77
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  Autodraw/Styles/Landscape/landscape.jpg
- Size 261KB
- SHA256 f26b737182227cf09a96b67be46164bf4ee259d45986a720dcd9a0058e7f3849
- MD5 76a7473046ff51b7dbd7265dfd49cc17
- SHA1 107b8e3a34f8f20681dd06d6108f1c51b0305131
- SHA512 6e0d83026e13ad4c1ae8f0f6c684efd08ed9062ec809514b9dc0d5ce2a4e54ce67d8787980ea95a620e05fbca14c09daebd08458208be49f24e01eee9c72a073
- SSDEEP 6144:s8+xH6BYwe+MwLl6Ssu0azNixKSWEI5eBSFpny87/79w:wxLbVgByazNixfDOrHy4xw
- TLSH
  T162442330EDBCE18243B84D4D1FA4AD2F1B8AB80D8D8DDD73B51F66596E612730E15B28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Autodraw/autodraw.exe
- Size 34.5MB
- SHA256 6fe2ab89cded0fbd3aa5d9680cab2481287d9e3cdd4c90de42c9020bb17bb9ea
- MD5 603e9aa8ce9c362f099649b75cb36555
- SHA1 37c0f125c7a33b7c34770bdc1da403a5362e04ad
- SHA512 bf39c1d9cc7af41f7c7b15914bf322b7de9d1df3ba65cd981b0a7e079d6a45d5e100e81afa1611d1da4788a67125c0e5d5b947879dd461a192d923d3c4663a3e
- SSDEEP 196608:KcAc8d5rv4/fpVrrOrvevb/lwhP2zRIKuk+fVOVzH0/1HSV0oc5MZtNVCfa9u1+s:6D574/fpVrYfgm8W5olGaJY
- TLSH
  T154879E07E79C8E1BD5AF0A3D947802C0A37CE4769751DBDB710CB5A85B5BB080E263B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion discovery persistence ransomware
behavioral11 behavioral12
- Target
  Autodraw/av_libglesv2.dll
- Size 4.2MB
- SHA256 85b3aee47c0e0eaf3a5ea5c75ba8131387a12639b6a0ef280c28531fb77695ae
- MD5 73d2fb4c35d323813a86e3bf5c85c345
- SHA1 81f751a34e0c25bdea93902a19a94a49ce1495df
- SHA512 e81677cc9b99ff3d54f67000a60489603e01a896f90c4ef0c883b82e2fdb7b90d2899c078958b3f060a20373b99cb6c4deb7f64cc4c7e0ba2a708209f4684ca4
- SSDEEP 49152:I1qISHMa72SRXc0kFg760EvAy4U5hDempTKkslMx0YEQtHhcEIy/rcgcrq8T/2tj:vbMNgMdth1t
- TLSH
  T175167D1AA7B400BAC8BBD139C9175A0BE3F1FC4641B0D70F21B9679A5FA7770626B314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  Autodraw/libHarfBuzzSharp.dll
- Size 1.5MB
- SHA256 f13d0dae00a598620a436fd991219a2e0fe6157eac90faa025d4d76845cd996c
- MD5 f121a2afb03f1b8ca1784e544464a346
- SHA1 9346297a66989dbe88bc459ee8bf936e7acb3d24
- SHA512 ebbb8c2d7d97521286af0f6b02195890b193e660a28e6b1e5112ed9f1fcc081c66587a7a82c8a9468d1a55d477880487d1b3edf1deb2ea285e17d70fbd56c6f1
- SSDEEP 49152:PBy4VCDmxqVx/1hlcsHI7woyGYdwENWa6m4ys:aQkPNWMs
- TLSH
  T1A575AD4AE26A11E9D9ABD074C656840BD3B274420F14DFFF26E08695EF23EF5167E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Autodraw/libSkiaSharp.dll
- Size 9.1MB
- SHA256 4157658aa5b75683e01953df4bd5cd1cc9ce313f4eed026d5fce31f80f4ed7ca
- MD5 0c8068859d2a240b9faf5c51544fe666
- SHA1 f8a24d7918f1151f8d10dd606c73e5cd530e30f1
- SHA512 53d3c4d4f2d9cf24f6c97924c4ec33865e7a7bc8aafd39b0b65515395fb6e14525da435017e6e943f9dfd00a8ef319b880b73197772fe814b06ceb32f9185fc3
- SSDEEP 98304:h8a8BnJ0P/lYHXQyjSXGl5yEcl0WbG8KIqccMk/wH1bHL1:V8BGP/4SX6RzLh/
- TLSH
  T14AA64B03B66B64ACC04AC474934B99666D2038CA0B35BCEF52C5A5393FB9BF42F7D215
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Autodraw/onigwrap-x64.dll
- Size 593KB
- SHA256 3bd109e586f3e05cd32eb1f5a56853ba16098ca7505570850530b9cc708ff88a
- MD5 aaaaf795444771595819c5ccf400ccae
- SHA1 b6c1cf2ec9985284373f21fc14ba19cd2ac7d2e8
- SHA512 1de26de3566e8eedf0ff9c145c1cbbd9f3169bad2cbe2fc939a01517c16220d3a189f9b6a94293ad72549577ebc1972a67d94adc490030114e6819a78f0c46a9
- SSDEEP 12288:4eiwJjxVJiHqdBw+7/+rytknQVHVn2sl98IpU3AXGXG89B911ZS:tiCjxVJiKdBv7/qlq2slIWKXS
- TLSH
  T1CAD41843FE82CBA5C1AE41B4C896D3F68276EC411B118B8B2754BD277D233A55FF9218
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Autodraw/uiohook.dll
- Size 636KB
- SHA256 b191bbdbf7ad7c085383690ed392ec5bcf26282946c23aa5fd78336555a59c37
- MD5 e957f912c11c93aefde7fc5bf97d005d
- SHA1 9f8d9210e9970779476a81ffc6c76fdefc9802ab
- SHA512 5b21969ce0eba94a231944b93f1068ce48e422e830d94812ace31c60614545adc238edb852980e4299f0799e2aa2cce03f514d48e04c3113397c21c48218d2ba
- SSDEEP 12288:kbZxdPGsSV//SmGAqXwA0RTi+90zT4vc++Z6gZ87JLYNX3Jo:kPp8Vunu
- TLSH
  T12AD48E6677E81296D077C13EC5868B69FBB1BC140321B7CB01D041A9AE27FE85A3F725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22