General
- Target lkmmnkl.rar
- Size 660.6MB
- Sample260729-vvka7sca64
- SHA256 d74f305184d4ed5286244d2385baaf0299a387320533c27b0b22d9daca15448e
- MD5 ac4ebc68be934229f3e7fdb7de8500be
- SHA1 795f88933e80eb2c0709d090f4d5afdebe580eb5
- SHA512 8655d1eecf6c03f9abd9f20a5798c96fb57ac58ce94fc8b6ddf02b6c1f5d40bc64375aec61083bde68f462886f4f8da403273e2813dc033769eece11a25693b2
- SSDEEP 12582912:XhKF29ZDcsv/KtBZ7pfeCE1eWRkK8H1K5zystoIAy8w6zqYeZoF7V52i6CMklSMY:S29ZDcsq7Z9fVWOLU5xtoIAySOfon52n
- TLSH T18479330B7949A6C29AA818CC17DCF03DF7A2690A1A794DD835F2F95DCA8FC190E4DDC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
lkmmnkl/CSP_502w_setup.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
lkmmnkl/CSP_502w_setup.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Behavioral task
behavioral3
Sample
lkmmnkl/Patch1/CLIPStudioPaint.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
lkmmnkl/Patch1/CLIPStudioPaint.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target lkmmnkl/CSP_502w_setup.exe
- Size 463.9MB
- SHA256 037e5ffbd8f21af13f774bfb3bd8d736ce6d0b7f750b0f99fb1d5815f3853865
- MD5 ca39eeb3fd4f93b64a01076e1a80f419
- SHA1 8136ed68eb48f1e617c264f948b0997fc0beb501
- SHA512 46815771bee241608be6e541b285acf21d5dc149d3d4fc1fe8adb692a8b8ee141d82ff2788ff38365f23a8d1571d8656de46315f889c7aad197d947172d59630
- SSDEEP 12582912:rQ7rPNPK6s7qj4ONsAtF/pkZ2VF0U1h2Pc8xY:rQ7JPvs7qjvsAtF/m40Xcr
- TLSH T1F13933177584491EE57B4332EEAF0E52B6613C336721848BB2D0FB681CF16D1BE63A16
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
- Target lkmmnkl/Patch1/CLIPStudioPaint.exe
- Size 88.5MB
- SHA256 6fb51a3ff24b15ec3c084a3cc5281c43db3d5e617091cb1d60e717f492935319
- MD5 4cadbdb0d1af65e8b9f8ab2b6f7a0412
- SHA1 e9cd0d825889985f9ec7a5a869e10ec0f50f65c6
- SHA512 40f82a45f0ab717277967b493983192b33d27ec3a28a27a3344e18a7fc62613ba26609b49b383a24f9e5928775a567b43cfd3f845311c8970dd08066fdb65f26
- SSDEEP 393216:pJOMlgkW4ptR/nJzlL+vZASk27PdJ77lRjV4vKAtnyp+++71mR0LoGgyE1wz2dpG:xfRryp7lRhQnboG
- TLSH T109182B96B2A000E4E1B9C0B6CF599D13DBB138960731D7E709D1F9A79E7BDF095BA200
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10