861970344fd9b9e425859af03fde3455ac04353a0d651f343c1d7241d4aa5c48

General

Target
ClipStudioPaintEX504.zip
Size 492.5MB
Sample260820-2ec1hsga98
SHA256 861970344fd9b9e425859af03fde3455ac04353a0d651f343c1d7241d4aa5c48
MD5 0419976d0f38d398b0ccc12ac7007a84
SHA1 81a984a4422a26c7eb06b9e102ee5a1a4274cc43
SHA512 587d8f6bb4c32c0a09c8e5405d55d5948da53e373797b4373b853b787158b140ec2fd127e740f635786d524611656e0377132e02301b29845048f2ce069cf273
SSDEEP 12582912:pLE19JzyzQjU03jLAGDYvBxwuv3DRMC4ga3OlLET96Kmo9:pLE1/yzcU03uxwuv3DRMCEOC6A
TLSH
T1923933CA74EFBFD2840EA46FAF144506B6017146B22EC87866E22764FD3D2577ACDC81
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  Clip Studio Paint EX 5.0.4 (x64) Multilingual/CSP_504w_setup.exe
- Size 464.0MB
- SHA256 27749e99fdf92634a621ace485805eb53001985afc2a73ad20576ae7b8f7c3e6
- MD5 66374c164b0f6be8ebcd2e3046d9b97e
- SHA1 1c54779460993fc46e0e8d0a65e24c6a43531d70
- SHA512 9d3bae440802658f43bfb3fe841bf0677c005a474330dd59bccd34398b671ca8ca74d3d98482e1fc0d25adbcff1cbf20c7f8c2e56a4dbd7ed29ae9f79138bfdc
- SSDEEP 12582912:IQ7rPNKIlQm60dUypnOE0lfDPTF/pkZ2VF0U1h2Pc8xf:IQ7JKIGm601ifDPTF/m40XcU
- TLSH
  T107393317A5C4451EE5BB4231EEBF0D52BA713C236721888BB1D0FF686CF12C1B967A16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

adware defense_evasion discovery persistence privilege_escalation ransomware spyware trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
behavioral1 behavioral2
- Target
  Clip Studio Paint EX 5.0.4 (x64) Multilingual/crack/CLIPStudioPaint.exe
- Size 88.6MB
- SHA256 2e08e084c7f2256d4bba1d6a5bfcdd3498b8cd026667e1952e116c56c9ac9a2a
- MD5 3a8d04f8e5c7aa56b8e1ef7af9c6f568
- SHA1 cfa0b824a824f1f95a8689074216b80e68607d0b
- SHA512 cc9f41c0a1cab7be669bc1d3963e4d4888f6145f79d1ed8be0f533e6bb0a124d40e4a276a93d5a7b9fab5b78af40b09677b08e30f812a22643a509d0392330f8
- SSDEEP 393216:B+y/o2XyqMLaUByBjnJNlqWs0YxjVBMYzkUZiMTLa6L5m+kB+jOVfUd8yNfMj3Qb:YylCDXAJBuNkfMFACzc3ca
- TLSH
  T133183B96B2A000D4E1B9C0B7CF599D13DBB1389A0731D7E70991F9A7AE77DF095BA200
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4