General
- Target paint.net.5.1.12.install.anycpu.web.zip
- Size 617KB
- Sample260912-rfvlvaal41
- SHA256 311c28433616c80fe0e3fc56a23b87068a8213e38f52481f88f5f9db147d3e5f
- MD5 e9116f8189f87c1323357e2ee70016d1
- SHA1 7e46f40bcc3a6fcac770fd40569158030e1dee2f
- SHA512 c20e17d72446aa67bda445c0bceb1688c25f7c8830d69fdd4cf8f476f9e872127718de686dd269e041428cbe3b14f72a80308b5394cc43103c6fbccc4f77b201
- SSDEEP 12288:N0F1Z4AUK01UaPeptTB3BPzb64aGmscRrzEFxnkuxxZRDsZQUAJHCcA43:NZpK0ZepbxPP6/PwFhkuxzRDsZwJiT43
- TLSH T162D423DA39DE7FB2A716593BEDCE0AF6A49B300A074DF944E4287A1D04574EA843217C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
paint.net.5.1.12.install.anycpu.web.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
paint.net.5.1.12.install.anycpu.web.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target paint.net.5.1.12.install.anycpu.web.exe
- Size 781KB
- SHA256 81b6e5268084e9ece483050aef5c25e4a88322eb9bd71a547a9a8b57c4b99923
- MD5 788b6d245d1d0bff6b1fdbe4abed0943
- SHA1 e6c8395ff3a17645e2679a19c0f873d55e7b9377
- SHA512 16296d0186b40a8077b1b5266fa536529e8657628dbf7246e4735b164062cde49a63fb01a44cbc24842d2929323fb78167574931dd074862282face53cdcfdcd
- SSDEEP 12288:2437vxMXHXUW5dHrTzJlV6aaGIscvrz4nxXk4xx3jDspQkANpCcqz:97pakW3vJT6F18nNk4xljDsp2NkHz
- TLSH T1DE05E04BB3A514E8E967C53CC9829646F77638560724E6DF26B0872A3F239E45D3E330
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.