General
- Target paint.net.5.1.12.install.anycpu.web.exe
- Size 781KB
- Sample260819-23nf6avgqa
- SHA256 81b6e5268084e9ece483050aef5c25e4a88322eb9bd71a547a9a8b57c4b99923
- MD5 788b6d245d1d0bff6b1fdbe4abed0943
- SHA1 e6c8395ff3a17645e2679a19c0f873d55e7b9377
- SHA512 16296d0186b40a8077b1b5266fa536529e8657628dbf7246e4735b164062cde49a63fb01a44cbc24842d2929323fb78167574931dd074862282face53cdcfdcd
- SSDEEP 12288:2437vxMXHXUW5dHrTzJlV6aaGIscvrz4nxXk4xx3jDspQkANpCcqz:97pakW3vJT6F18nNk4xljDsp2NkHz
- TLSH T1DE05E04BB3A514E8E967C53CC9829646F77638560724E6DF26B0872A3F239E45D3E330
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
paint.net.5.1.12.install.anycpu.web.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
paint.net.5.1.12.install.anycpu.web.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target paint.net.5.1.12.install.anycpu.web.exe
- Size 781KB
- SHA256 81b6e5268084e9ece483050aef5c25e4a88322eb9bd71a547a9a8b57c4b99923
- MD5 788b6d245d1d0bff6b1fdbe4abed0943
- SHA1 e6c8395ff3a17645e2679a19c0f873d55e7b9377
- SHA512 16296d0186b40a8077b1b5266fa536529e8657628dbf7246e4735b164062cde49a63fb01a44cbc24842d2929323fb78167574931dd074862282face53cdcfdcd
- SSDEEP 12288:2437vxMXHXUW5dHrTzJlV6aaGIscvrz4nxXk4xx3jDspQkANpCcqz:97pakW3vJT6F18nNk4xljDsp2NkHz
- TLSH T1DE05E04BB3A514E8E967C53CC9829646F77638560724E6DF26B0872A3F239E45D3E330
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.