General
- Target Portable.rar
- Size 146.6MB
- Sample260820-v4egbagk71
- SHA256 6883d27d3c1339eb0dc990bec980db0ac66084dade0d2f1a6217ae5e12eb300d
- MD5 cc1f902cff2207dc10fbd7a591cd2a12
- SHA1 e0e5710cc0fa612da41e3b724b3050097a8ec3f8
- SHA512 5d261255004e9a9b639facd99cc90b1f33c06c7bd4dbebe9b9d83c51b73c7eccc91febf63b298d609396fbf0816f09f4fa0f093728cbc791267ce2f0500d5a5c
- SSDEEP 3145728:KpcbDHIlPze7cZUtrH1ZX2LLtu/NHPBp26hTsr1CK:KpcbbItawE7XSLtuXppTsrf
- TLSH T1AE78339011D867D25DCA62039A98CE3C3767264AD021F8B8309059FEDAA977F7FDE14C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Portable/Clip Studio Paint EX 3.2.2.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Portable/Clip Studio Paint EX 3.2.2.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Portable/Clip Studio Paint EX 3.2.2.exe
- Size 153.5MB
- SHA256 2f1cc66cc652791c3534affd608a52b5e845b44a3143cb6e20397fc9b3511653
- MD5 1d843e932c2cd2978e8a8fb35ca5e284
- SHA1 b161737347d96e439326d1d897d2b99fdd7f7b49
- SHA512 a6f4a1628df631676d219ddba589b70646897cf172f2573a40b018d16d3d67130ad404ed3f4a95e106bff6395382b828f7da3875498d127f28ad8e09ceebf933
- SSDEEP 3145728:1/4TVI87d9wn4DeVt0YoCaUAnWEX9UKhyrzEQxNbBYnQeFja60/rgCxDNClSR:1g5rd9wXVt0XoHEQxNb6nQA0/nHCl
- TLSH T164783397922D8EE3EC3A56304C8AC246EC835F6F89A4F56E639D333904B734561B9C17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger