ae5fa59992fa8293036e36c935301d422d352a3837211ff8a67c85abc6f04f8d

Sharing

Copy URL Twitter E-mail

General

Target
Clip Studio Paint EX v5.1.0 Multilingual Special Edition.zip
Size 526.5MB
Sample260812-2jxwgswdpc
SHA256 ae5fa59992fa8293036e36c935301d422d352a3837211ff8a67c85abc6f04f8d
MD5 898f467e799a9d5124e8462f335b6129
SHA1 f0aa683e0dc6125336b39535a43b639dbe15e933
SHA512 c98b09f1a8ab5737024d7bf157984538c218904504aa6e8d74a33545f175a1cf5d2a213c70a7cb3f0914de4cf4dda46450e5a68a71864934282c9e99b274b95c
SSDEEP 12582912:uMZtX9w66urTTTnOszUWW36aQ2aB2FPMfLvof2euW5tjk0uO:uMZrw6JrT33naQ2aAMk2Q5FL
TLSH
T1114933CAB0FBBE51BD2D65337F5905167204A597A1379EFC21E16380DDBA3930ACE881
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Clip Studio Paint EX v5.1.0 Multilingual Special Edition.zip
- Size 526.5MB
- SHA256 ae5fa59992fa8293036e36c935301d422d352a3837211ff8a67c85abc6f04f8d
- MD5 898f467e799a9d5124e8462f335b6129
- SHA1 f0aa683e0dc6125336b39535a43b639dbe15e933
- SHA512 c98b09f1a8ab5737024d7bf157984538c218904504aa6e8d74a33545f175a1cf5d2a213c70a7cb3f0914de4cf4dda46450e5a68a71864934282c9e99b274b95c
- SSDEEP 12582912:uMZtX9w66urTTTnOszUWW36aQ2aB2FPMfLvof2euW5tjk0uO:uMZrw6JrT33naQ2aAMk2Q5FL
- TLSH
  T1114933CAB0FBBE51BD2D65337F5905167204A597A1379EFC21E16380DDBA3930ACE881
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Clip Studio Paint EX v5.1.0 多国语言特别版/CSP_510w_setup.exe
- Size 466.1MB
- SHA256 a8584f98f7c4f1f52c966a7c46d26805b81d5122b7dae6c3432fa7c96f1a0516
- MD5 406e935c90ea6b4b7c1675fb3719859b
- SHA1 fe3e26d889311ba9d37edfcdebe7bd870344c7c0
- SHA512 6b0ea572cab604726af54a249113e858236e3048c929ef66d22ecc24e46c56a8d95bd51eea6ce358c13fad34125e6b3954626c7197a9aca46dc55703cd2d9ca4
- SSDEEP 12582912:qQ7rPN+JE1bfc9HDaqPaTp9PF/pkZ2VFD1h2Pc8xe:qQ7J+JqbfcxDaTDF/m4+cL
- TLSH
  T1E5393317A1C4842EE97B4331AEAF0E52B6653C232732858B71E0FB585CF17D27D63626
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery persistence privilege_escalation ransomware
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral2
- Target
  Clip Studio Paint EX v5.1.0 多国语言特别版/Instructions for Use.url
- Size 144B
- SHA256 ebb9c9fcdbb547cd7551e0716003a5db8a920f551714fa4d53dff4296557583e
- MD5 20b68f7760640c255d936148e55024ab
- SHA1 4c77240095a96aa6b88b823513d43ea93a54b0fa
- SHA512 8ca227e5c2dcf4d74a70684226f41eaa4c2b93e840f62aab4f60fde792e723398573c4947d69d474642622c0194e6d1cd5515178751065522c7a9c24ad2559f9
- TLSH
  T1DCC08C6F850A81A9C301540610F0F804A40F39A098E2904CA924CA975C4C0D3C448E39
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3
- Target
  Clip Studio Paint EX v5.1.0 多国语言特别版/Instructions for Use_Readme.txt
- Size 9KB
- SHA256 9c5426a6ec9d4aec3dd2e6f45145344672b0afc106f2dfae3af2e504d64ad0ea
- MD5 75ca75b4cda7222d3d86b650600b446c
- SHA1 385a91a73e77200641d7bae18aeac448b9a21aa8
- SHA512 999abb79db07173b07a21f50c405737fb0d5585573e04aed4aff2bccaadd31aa6c01c04fca66133e4a0f6f9e3d67b7de55cc5c0040bbc504b07b659833bec978
- SSDEEP 192:aSlSbbOdjW9Ggs66Fpy6Vimh92SH6uiUnYLdvYuDfXaXdiAzJKrGt6s:abqhW9uy8iT860md7rXaXdi6W06s
- TLSH
  T1D022A6EB72C713324D611286BB8ED6E0F33794E46329441274AE41AC33439AF5776AED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral4
- Target
  Clip Studio Paint EX v5.1.0 多国语言特别版/Patch1/Anti-Resale. Proudly brought to you by bbs.itzmx.com. This patch is absolutely free! Please do not purchase it.txt
- Size 654B
- SHA256 69e05eebdfa467ef3a2df384842d3b1561309da7937a5f554e0735a4d5ab649c
- MD5 a64f96cb67882ede802f28932dd97a42
- SHA1 c66ba6ff1df06e0ee33a98f726c2895256a1fe06
- SHA512 0fe1fffea8c33039c084aacecb7aab342eb37a4d94fadf278bbb31c56d8de5f0b9466788462e24ac8e1dd9f0df374f9095d8bf8389ad427b9363e9853dcca444
- TLSH
  T187F0D32FEFB227790F2111C41C09AF65F6463CE1AB5657C87F55E0043359D0F458486D
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5
- Target
  Clip Studio Paint EX v5.1.0 多国语言特别版/Patch1/CLIPStudioPaint.exe
- Size 37.1MB
- SHA256 1479adf9e699c7ca3ead497ff804787affcf1b5918aaa895e01417ebdcbd719c
- MD5 9f0e7bd5dcc91810ccf228266a449d32
- SHA1 fa1576a4f9296b502d10c7ec0964541c631e33b3
- SHA512 ce87a9324fe7e734a2a404d04cf026a7cf02e619a5350ad27063e15ba02d7af69ec74b8963c349f0a15b190a2cf3417ce757bde75e0207c4ce1ca9b95f36aa15
- SSDEEP 786432:NfmJrQkdgrV3esAwWhz0xLS4VpK4gu3l:qr6eskKS47bv
- TLSH
  T12A870165BB84D0C0CA0BA5F0D0996BF352DEED6DCAA1600FA1497DDC3DB638B10A75C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  Clip Studio Paint EX v5.1.0 多国语言特别版/Patch1/【防倒卖】bbs.itzmx.com荣誉出品。本补丁完全免费！请勿购买！如发现贩卖，请退款差评举报！.txt
- Size 553B
- SHA256 9fae33855dc367862524e2c78557a0339f38b0a1080213e75784a022781ab092
- MD5 12c78bf18c7e3c7a14d38a9ef6574d7c
- SHA1 b942ca3e8e32e7ef2db386733a3a64e906fadea9
- SHA512 4f73d3cafcbdbf598377faf378f1fd3147a15502a7a0b8cb1750e8fda04c2dbd28b1b6232f4368cd4ad93133fa55383d66ef74fa4d105c34ca8a3cbcb5c8b4bc
- TLSH
  T14BF0C02FBB7336381E2121C01D06FFA9F54D3CE0A9569B84BE15A048336A55F8585C7D
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7
- Target
  Clip Studio Paint EX v5.1.0 多国语言特别版/Patch2/Anti-Resale. Proudly brought to you by bbs.itzmx.com. This patch is absolutely free! Please do not purchase it.txt
- Size 654B
- SHA256 69e05eebdfa467ef3a2df384842d3b1561309da7937a5f554e0735a4d5ab649c
- MD5 a64f96cb67882ede802f28932dd97a42
- SHA1 c66ba6ff1df06e0ee33a98f726c2895256a1fe06
- SHA512 0fe1fffea8c33039c084aacecb7aab342eb37a4d94fadf278bbb31c56d8de5f0b9466788462e24ac8e1dd9f0df374f9095d8bf8389ad427b9363e9853dcca444
- TLSH
  T187F0D32FEFB227790F2111C41C09AF65F6463CE1AB5657C87F55E0043359D0F458486D
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral8
- Target
  Clip Studio Paint EX v5.1.0 多国语言特别版/Patch2/CLIPStudioPaint.exe
- Size 35.8MB
- SHA256 fa35039c92af8472fd77de789a0f978c41a0946f9e707e945fdf37b3d69544ee
- MD5 5f31ace2034ea930d47e0073efcdafb9
- SHA1 c888871d4b16ee0eb19754d47de690602d2edb27
- SHA512 5249204351ae5dea05ade4a2977a07b28737ed91864ab3dd089df39406acbf48270131b32f24926a36dc5e0ce5c5875a47dc85c5c07ee924d2219ed5d747d8c1
- SSDEEP 786432:kJor9SSbBjDSi293FGcA+vlBKzwUEAQ8+D6esgR3Q:lSSbBjDSLfGibKzwUw8q6s
- TLSH
  T1C5870151BB84D0C0CA0BA5F0C0996BF752DEED6ECAA1640FA1497DDC3DB638B10A75C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  Clip Studio Paint EX v5.1.0 多国语言特别版/Patch2/【防倒卖】bbs.itzmx.com荣誉出品。本补丁完全免费！请勿购买！如发现贩卖，请退款差评举报！.txt
- Size 553B
- SHA256 9fae33855dc367862524e2c78557a0339f38b0a1080213e75784a022781ab092
- MD5 12c78bf18c7e3c7a14d38a9ef6574d7c
- SHA1 b942ca3e8e32e7ef2db386733a3a64e906fadea9
- SHA512 4f73d3cafcbdbf598377faf378f1fd3147a15502a7a0b8cb1750e8fda04c2dbd28b1b6232f4368cd4ad93133fa55383d66ef74fa4d105c34ca8a3cbcb5c8b4bc
- TLSH
  T14BF0C02FBB7336381E2121C01D06FFA9F54D3CE0A9569B84BE15A048336A55F8585C7D
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral10
- Target
  Clip Studio Paint EX v5.1.0 多国语言特别版/RM01.png
- Size 23KB
- SHA256 e807560b92a2fc01f9698e255819bf92a8369b2641f816cd8155902467da3b0f
- MD5 cb627e68c40696dcc7db807d75cfe6b4
- SHA1 53643dabc5af0fffcba5b617b3ba8b8f052d5f5b
- SHA512 2a5633b348d5feba320c78e80fdec3498201daa1017ffe41d4fac5cf4aa9b203f7b764cf100842412914fe2ca74d5eea820f7ad6537e2e8dc4ec9dda301d3e04
- SSDEEP 384:rrvyCCraKAc8MiCxlXdVsylq2IzELAKfG6L0K0QepKrkgkM0Cs7p4Z1B9:fvynnxr9lqzQE6FepKrk3f7+9
- TLSH
  T1EBB27C45D5E03C38CE9F96F7E6D643A97AEC028038B38C59C61246D8B6316D76953DE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  Clip Studio Paint EX v5.1.0 多国语言特别版/RM02.png
- Size 12KB
- SHA256 bc9bf8e31c021f27d919c722ba2dcd52a7d87c06404d774da36d5746a948f40b
- MD5 c7142b2540b8ffbafe5edad8d5459802
- SHA1 3882cf1c89f17b2e712fdd202cc7a397d51ee1aa
- SHA512 468e3e4f918bf0f960da64b0d084a8e919943258fe2e4fb355a87fd6c38fa8aeb541097304acd7d0ff4308c993690091f158aeb08dbb5fcc9c80472d7176a553
- SSDEEP 384:xChhnWLuoioRYtVOMhuf+5Drq1B9Do1GLg:0oJYPBo+5De707
- TLSH
  T1B042AFE6AD87032DD72C1434901AE3C3B9EA71485DC3BDA6FE4325C36867469ACDA343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Clip Studio Paint EX v5.1.0 多国语言特别版/Startup Password_Start password.txt
- Size 122B
- SHA256 b1e44be311f545ae7c98909160b406c88284b8003bf890c6889a1c8d4fcaa8a9
- MD5 8ffe926eb5cd1206aa7e9474ae796af6
- SHA1 525999db31aa6c4d421178aa13de67a57c9b59fa
- SHA512 fef918e1db297669e6c6d245fad745041d735cdb2a5c7dc9da23d10848d1dc3581e8852cae9c0034d2869803cda9793fd04e86b98ccc323ee9d0a3d7341a0e6b
- TLSH
  T1EFB09253FFB4613C223204C01D0999BEF026A8E1929A9F88AE4D70862385A9F9CD5878
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13