General

  • Target

    Bussin.Napture.paf.exe

  • Size

    24.8MB

  • Sample

    240602-3elhbscb34

  • MD5

    413ffa3eea3a9de663508c5ea917709a

  • SHA1

    214f9b6197616f345bc5df4f8719652182ad7251

  • SHA256

    8489917baf4cd1a56dbee28f9e39398a6f8b60e11e813e5d2cc8a48055baa1e7

  • SHA512

    0a179f58a39a34ef7126aa071e6fa0b58e47ea3b252a5c38023a98419f693cf8c94e6eee254d5008511cac669f3783bd637461f645109e31c0ec2cb5b01572ee

  • SSDEEP

    393216:MvpoK++itMgS3M7pjHNdBURQFWhePngwEc5oEZC5knA4emhIYX3kI8u1Qz/m:MBQMpc7pj/BuKnZEUomC8LhIgkIQjm

Score
7/10

Malware Config

Targets

    • Target

      Bussin.Napture.paf.exe

    • Size

      24.8MB

    • MD5

      413ffa3eea3a9de663508c5ea917709a

    • SHA1

      214f9b6197616f345bc5df4f8719652182ad7251

    • SHA256

      8489917baf4cd1a56dbee28f9e39398a6f8b60e11e813e5d2cc8a48055baa1e7

    • SHA512

      0a179f58a39a34ef7126aa071e6fa0b58e47ea3b252a5c38023a98419f693cf8c94e6eee254d5008511cac669f3783bd637461f645109e31c0ec2cb5b01572ee

    • SSDEEP

      393216:MvpoK++itMgS3M7pjHNdBURQFWhePngwEc5oEZC5knA4emhIYX3kI8u1Qz/m:MBQMpc7pj/BuKnZEUomC8LhIgkIQjm

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      192639861e3dc2dc5c08bb8f8c7260d5

    • SHA1

      58d30e460609e22fa0098bc27d928b689ef9af78

    • SHA256

      23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6

    • SHA512

      6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc

    • SSDEEP

      192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr

    Score
    3/10
    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      b7d61f3f56abf7b7ff0d4e7da3ad783d

    • SHA1

      15ab5219c0e77fd9652bc62ff390b8e6846c8e3e

    • SHA256

      89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912

    • SHA512

      6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8

    • SSDEEP

      96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks