9b70cfce969fec43f28e99f7ffd6874ec89a63a48865959dc7a2f716e150c6fb

Sharing

Copy URL Twitter E-mail

General

Target
sai2-20241123-64bit-en - Copy.zip
Size 4.4MB
Sample260804-ea1vfsvwc1
SHA256 9b70cfce969fec43f28e99f7ffd6874ec89a63a48865959dc7a2f716e150c6fb
MD5 e960867ef4333c16e63a3202f88c70d6
SHA1 b092f531d08c8d7e163e78f6f11ce024fffee4af
SHA512 e9552b2dc5c70409c2dc83f7e1ffa37036e60b6af4c70de4903ae12ca9f26ded450e1d7439c27af58eebefb50e6310f5aa6d1a7522451503bca6a12ba16bfae9
SSDEEP 98304:hSfut9JutlgSKtxouBWkhjtMVM1GQVs/P3XBWkhjtMVM1GQJkxy:hUg9w3gjmVMZVoIgjmVMZJkw
TLSH
T18D2633BCD63BA314C9E47A78E3A460DE8AB67817901CCCC40EC2D984D22D4F96D9D5F9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  sai2-20241123-64bit-en - Copy/history.txt
- Size 85KB
- SHA256 4a14ea751a054f4cab1593477fbe78408b7b309b96d57f28c7425868aa57fef9
- MD5 b75d459a4938054f58bd40a14d456a26
- SHA1 c5bee61d9a6781a43b887d1873d7e1320ede8f03
- SHA512 117ac02b51b7c79de3f9fe1669a6ab7a2c1728ac670b059d99578736bcdc36a22ebe4bf2fc915b1b167d83ad68765fb652550ca1f52013010d8a80c8e2c73961
- SSDEEP 1536:F2lPksHyMLBqa2ijKx8tJc65JxtpuckLAU:F2/HyMNzjKxeJZjuckLAU
- TLSH
  T10583A2567F0FA3B14273C24AAE49A18CF76544C8932F0245799CF12D1A9C8FA927F1ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  sai2-20241123-64bit-en - Copy/init/blotmap/Blots&Noise.bmp
- Size 65KB
- SHA256 75b412bc911f85b71ab0f74648fca9d8a7b0f88bd2eb65cd9f941cc1ca87fa42
- MD5 7e313e2d7a64656ef7101d180efc2da8
- SHA1 db826e9474a163042679c667b6f51d382b09d9e8
- SHA512 e6b01b1d0b2b2209ca58129b72936086aa7ca1de5a000ea645d82aab02e07c69581f4493c5c66c6e4904b94111c494d31290768ec6427de7f00ebdf787bdca38
- SSDEEP 1536:HvOYAaAJWndc6tmZQ4ynFVZV+NrVclruBVRV7LbWETwwhSa:OfJWnDtJ4CnQOlSj7LiETwwhSa
- TLSH
  T1D253029781E12C3FCCC8827135D41396FAD6E4AFB6A7095A932BE0154EBE8D94DCDC42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  sai2-20241123-64bit-en - Copy/init/blotmap/Blots.bmp
- Size 65KB
- SHA256 3a50c1123d38839112e6efdba622098138f895eeca65a13923eaa00ef5903fb1
- MD5 b953210f80206d395f79bdfc480b08ba
- SHA1 f7ca426380a6c30c1bc1d75dd4b448298d64023f
- SHA512 fc0d6e82d492009253f906b7de82859319725d843d984ad468967703c26adc0e8bd2054f696fcc53fdccb3c74266658584f08d039605097aec5837fd233c9fdf
- SSDEEP 1536:Hqwi74oFET4vYtJ9rsQ/dVk0OAAJMneZCWk72O5w:K5RE7zs4CAAuW
- TLSH
  T1CE53F156E3FCEC505C2F9DC6DF898989DA28A2213B5250D21232071DD1EE5A3D7BB5F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  sai2-20241123-64bit-en - Copy/init/bristle/Bristle.bmp
- Size 11KB
- SHA256 027c4b9e37a606152c90ccb5b5b0cbfeb384521ba148cbce76c35057cbd6aa30
- MD5 94b664c148da3349be48d952364b8470
- SHA1 392911d0e7d9ce22564b0d841da5146d17483858
- SHA512 90ea80c72a6d2d89020603c2d85e42625b91dba18f20aece87551d60ad5665c1c09d9a1ac665f3ec392fa3920c0cb0666d8d1e410e2fec58823a112d70e51ee4
- SSDEEP 48:hMiI11fJEGCtiQd7uc6WgCsiaVp8YOIiV:hbYfJEGPmQBBiaVvOp
- TLSH
  T18E427E41B010D2646A0BB51B1DBEDBBC7860FC95AEE024E734B57B4F24713669071BC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  sai2-20241123-64bit-en - Copy/init/bristle/Flat Bristle.bmp
- Size 11KB
- SHA256 dc9dc48da8eaa9f627dc5285b4700b88d827aa26a36fcf9f36a559ab9f28a650
- MD5 a762568944134e7537eb748da8776815
- SHA1 f90c2c83a06005c0925130d229681adc95cc966f
- SHA512 832bdd390cb6cee903ff127dbe54b84772a43da23928c85c4859f85f912c1fe4276c3a5f4b33e39296e282b65d42356e592ab1d33260ec2e92636adc3015558c
- SSDEEP 48:hMiI11wOLGC9iTDFN568gC3C4nMXQKIiV:hbYwOLGPtaniC4nEp
- TLSH
  T18442D341B01092646A0BF51B1DBEEBAC7960FC95AEE024F734B67B4F24713669031FCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  sai2-20241123-64bit-en - Copy/init/bristle/Flat Face.bmp
- Size 11KB
- SHA256 54ba8e6318a98a6caecdac4ebf8b7b5961d49edcb908523625ce9bc3c2655bf8
- MD5 fbd59be2eed3f23790801f2a264c3f33
- SHA1 74c17e8b766a116a9fe35bb70f8a0e97f2465530
- SHA512 2f55e0f1ae9cbd191d52e56d8bd8e31a944f6b3b0c843d66e921080a7dae16d6308c30087569eb098d011d49bf6bb9383735e74122abd0dc4811139195e62a22
- SSDEEP 24:Go1SyeOtPI7jaIrBiaYdCByzTVapnDs0C0kiaVyIjjcIpOt9SyU:x5xI7OElYdCByzTVapnDs0C0MVyuAIgC
- TLSH
  T1B142E2627010D3645208C5139DB2DBBC6B6A3F91FEE026A734B67B4F30B136690B2DC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  sai2-20241123-64bit-en - Copy/init/brshape/Water Blur.bmp
- Size 85KB
- SHA256 9a259f9b7b94c150ed37061e18cdd8eae55538181ad1afe6dfc2a90b3bdfae57
- MD5 2a797394b1beec26aca584eb35115f00
- SHA1 686d9f2531112b9db3f735a5a79b90855039beec
- SHA512 313c1a20aa627ffe31b89d1a30909ab2fd91a08a575a23496118a7f4ab57d36049eabee6e0d243f751590708f46fe9b454cd1db391ff6fccdbce0c9862e6bc36
- SSDEEP 768:JiODirMmqNwVForiaMFyrz3CK99GjiP7IDKEQA7oNDP0JTml:JjoMFGBaQkz3x99Cg1EQ0CDRl
- TLSH
  T1F083E7026FAC3C92D1416A3D507C34115B5D83149CB75B4B3E76A8BCFE3A6C27E16A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  sai2-20241123-64bit-en - Copy/init/brshape/Water Blur.ini
- Size 1KB
- SHA256 77aea28c6a18d93bcd1b81f7d456cdb2cabd224efad0c8ff39518f2e2b12bde1
- MD5 e9c5a91a1f30cfdc5801fb357bc3fcad
- SHA1 725735f5de0d56a1a624d10a42f3680eb6f8f587
- SHA512 6e5beee25d1c9ba3f3e30945bd0a121f0de24c505ab05b7a6eb5965de4bb39d9ca7c0d8561c548990617f7a5c5d5dec5d49584f42b0e452b4480c45f9cf7fbdf
- TLSH
  T17321DE92BFABD61A350F59E01BD506598E3B2E8F1A2CBCA8349F18553351DE2C3CD710
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral8
- Target
  sai2-20241123-64bit-en - Copy/init/brushtex/Canvas.bmp
- Size 257KB
- SHA256 56fd2208ac9082c2500b155f5dfd312b3289c53b2e5ae259d6b30e50982a5d76
- MD5 77abf38ceb44ff0d9f32f1a28106cf40
- SHA1 4384db29026828c4f7497d11a462cf9395646923
- SHA512 e3bd4c4fbf7728f389d41dcfa35d4785e77c4ea8323ed48e398a9f5706083b59c26239687308634a3e15117ebb4e78a2f433db967e013205ae3e5c04b9ba497a
- SSDEEP 6144:XzbVhha7RgCzZoLQFYq9+pkzXrudzbVhha7RgCzZoLQFYq9+pkzXru5:XzqgIoLQFYq5udzqgIoLQFYq5u5
- TLSH
  T1D04401692ABFD0A5048914D40CDDA2A0698DA017F627DEF71D3123F8E1E2DBF4AC1B74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  sai2-20241123-64bit-en - Copy/init/brushtex/Paper.bmp
- Size 257KB
- SHA256 6cfc0e01583bfd0a1b1598bb954077acd3502bc5c24524132e3a17dac129137c
- MD5 3e940d47505ae20ae27a3023c1e4c5f0
- SHA1 54d857a1756f7d86beab7fdb1b136e8cd579eeac
- SHA512 4e54e9be69330ca2b35871a898ac7cc6d90c3c5b9f1b0f67b796ec3b2e0a50fe7e2633523fb3d096b0733f806f6ea7f9b380b5ebdc7f5c2d11ad2a8054d4618b
- SSDEEP 6144:9tLBKai7LLme60hsGPE5L9FUONQdY3X6Zfpv:wai72D0hsQkFUNEX4pv
- TLSH
  T1744402F6DB52CADD3D4258F6BD18BC727D53027CF0DA8721618A476B70A18AC468C2F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  sai2-20241123-64bit-en - Copy/init/papertex/Canvas.bmp
- Size 257KB
- SHA256 56fd2208ac9082c2500b155f5dfd312b3289c53b2e5ae259d6b30e50982a5d76
- MD5 77abf38ceb44ff0d9f32f1a28106cf40
- SHA1 4384db29026828c4f7497d11a462cf9395646923
- SHA512 e3bd4c4fbf7728f389d41dcfa35d4785e77c4ea8323ed48e398a9f5706083b59c26239687308634a3e15117ebb4e78a2f433db967e013205ae3e5c04b9ba497a
- SSDEEP 6144:XzbVhha7RgCzZoLQFYq9+pkzXrudzbVhha7RgCzZoLQFYq9+pkzXru5:XzqgIoLQFYq5udzqgIoLQFYq5u5
- TLSH
  T1D04401692ABFD0A5048914D40CDDA2A0698DA017F627DEF71D3123F8E1E2DBF4AC1B74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  sai2-20241123-64bit-en - Copy/init/papertex/Paper.bmp
- Size 257KB
- SHA256 6cfc0e01583bfd0a1b1598bb954077acd3502bc5c24524132e3a17dac129137c
- MD5 3e940d47505ae20ae27a3023c1e4c5f0
- SHA1 54d857a1756f7d86beab7fdb1b136e8cd579eeac
- SHA512 4e54e9be69330ca2b35871a898ac7cc6d90c3c5b9f1b0f67b796ec3b2e0a50fe7e2633523fb3d096b0733f806f6ea7f9b380b5ebdc7f5c2d11ad2a8054d4618b
- SSDEEP 6144:9tLBKai7LLme60hsGPE5L9FUONQdY3X6Zfpv:wai72D0hsQkFUNEX4pv
- TLSH
  T1744402F6DB52CADD3D4258F6BD18BC727D53027CF0DA8721618A476B70A18AC468C2F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  sai2-20241123-64bit-en - Copy/init/papertex/Water Color 1.bmp
- Size 257KB
- SHA256 43a13ec4f54eff7aaa77ab2a7a292cdbe58dbccdc6d37d95a1ad1528787c7559
- MD5 eb4116fcc59605182e8c76f4bb496958
- SHA1 aca13dfd68436c4bf62c13901723f067e2b681a6
- SHA512 9279e02fbf2f437a450fccf5b03524eee4eed33c6e0d09cca4eee3015fb4f0ae714d11c12f13dd414031263282df8aecb4eaa7196674193d2d94c6c77c583dc6
- SSDEEP 6144:JEiKyTU+zvgvE6ZZ1yqB/8mByfNbL7lcP91ZlKzQuUL38Rl6dfQ:JowYvhRUbfNvpS9NxuULMRwd4
- TLSH
  T1704423DA40AF32C2C486BF1B7AD094E2E97D612921C8B719239C1E00B3D7DFD5A6C576
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  sai2-20241123-64bit-en - Copy/init/papertex/Water Color 2.bmp
- Size 257KB
- SHA256 7ac03b1f36bd2a0fc257f6a2302f62a97b1098130100e5a7613fa86e1849a499
- MD5 9dd71181ba3d048b1a3bcce15c2c3871
- SHA1 0c49b850b83910efcf0127cb364777e419afa8b2
- SHA512 df4b23d5280b2c0bfe28ffebb688ccb4124ab51f3db1081934553d72d1755c163d70f8dcca132cd33ccb68df3e62f70d674586c5dded782dca8082b0687544bf
- SSDEEP 6144:O10L7Y5/adMbaDOWgyGAIVWCHef4BBrvIDatYDRw22Bva:Od5/adsaaOGAiHefe7IOtn22Ra
- TLSH
  T1FC4423A4C9199AC66780C72A143DE4DA5F20CACD6E84FD092F2C998BBC7B573D71970C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  sai2-20241123-64bit-en - Copy/init/scatter/Stars.bmp
- Size 247KB
- SHA256 ff8a738cfa44cd254ea25c1695195eaea696eefbbffc2f2013524c4a2f132fb7
- MD5 da037e53ba6eb77d61e6856b2ffb02d0
- SHA1 cc8e04047af2a4fce35a5852995f427080009619
- SHA512 bfa881de9c7c6b33b9f275da85c63df9fd7832d34050d7fda1bd8c3c5d2eca84e16009726c64ade122585b967c87a43dbd7ab442cc0fbee51921dd2a3b03c908
- SSDEEP 96:F/R5ZZZ0i95q+UL696bSlwTE4v5Dco3Rf6O/Tydm39zK5iDgF2ZMZ:F/R5nmi90+UL69iCwR3zrycf
- TLSH
  T1C044D5863141F604EA0ABA304CEBEF042DE93D552D05825D77B4F72E6DB2F06B87BA15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  sai2-20241123-64bit-en - Copy/init/scatter/Stars.ini
- Size 3KB
- SHA256 96278e4f41fae2796dacc4730d072876bcf7ff42134b262a9738d7c868a8717f
- MD5 4b20c575d361135f36a6e8627f814ddc
- SHA1 93bfd5b9197fa9cc452d83a86c1715f30494ec87
- SHA512 7f7a0b90929cefb67fcbcd8bf462783899dcce50d5ac61beb882a905c9a6bc276662d7e87821687f07c2855e73a76b17bb52b631f18b2ab31863d90b1c64afef
- TLSH
  T176710251EFABD60A700FC8E51BD54955DE776A8F5A2CBCA8328E05693312DA2C3DE700
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral16
- Target
  sai2-20241123-64bit-en - Copy/sai2.exe
- Size 5.3MB
- SHA256 e928abe5f1e7d4ae56cfa401499717311062cf1808c9cc522a6012af7fac87e7
- MD5 f479481188ccc01b969d24e4dd5f279d
- SHA1 0aa13ae137f76755dcd36b4e10ef06cc20c998c3
- SHA512 dd13147c314f65924bf9dae8faa21fd1aa132ce7ba25541fb8fe9a350668406958950e2972d6911cb8e59d0428a3ec7a7960f999f5267821bdb16e40cece761c
- SSDEEP 49152:HJiov6u4+IV7mzsahyVLWu0Rj7JQSm40ejsP303Sz33sT5N8r9G:HJiN8r7OSmWsxS
- TLSH
  T1B446B541A65888C6E0176030F55C676E6BB07C894351D2CB2B75BF09BEF3A90ED76EB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  sai2-20241123-64bit-en - Copy/sai2.exe.1761579497.bak
- Size 5.3MB
- SHA256 8f2fcf22c4d79393e960a3ecb23e120237594a59e3b66f6f2bdd71ccc73e3f93
- MD5 8d739a71412cd95b1f22ee92446cc72b
- SHA1 3dc751025ee8023580659e8af2c4f21419933dc5
- SHA512 278afd67d8bed89a74b823f7a6426a8e80e19c46bc3bca6f40d39342918e512bbf54789ebeccb1b6c7d1ca6b6c3fdee6f0bec77e717837c2249aa5c127cf1151
- SSDEEP 49152:HJiov6u4+IV7mzsahyVLWu0Rj7JQSm40ejsP303Sz33sT5Ngr9G:HJiN8r7OSmWsxm
- TLSH
  T10346B541A65888C6E0176030F55C676E6BB07C894351D2CB2B75BF09BEF3A90ED76EB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  sai2-20241123-64bit-en - Copy/sai2.ini
- Size 4KB
- SHA256 ebb0168868d0a53034a9b436f5a42034a8fd78ceadcc64c510195e7962959670
- MD5 cf2500efc3a5fcf450a510ca207ddf5e
- SHA1 5c7961b09ea1bbfbb85a3caa0cbcb4dcd9eec635
- SHA512 81d77c4a168013ba0b64c5835931c749f04ed6bd8da0d8b1e7991bfc9045aad5706964682df80f58128adc7d23ea54e3fda08466490c73193bb9ad1d9f1eeb83
- SSDEEP 96:r3SQXxaRIkRf6xaRIVmSE51lf6xaRIeoxYbxaRITUD0/m:7auWkauVTGtkauxSauTU4m
- TLSH
  T14C912A8226F98108F2F7BF456BBA19704B36BC95BD3CCE5C2185054D4AF1E50E972BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19