General
-
Target
Bussin_Napture-portable.paf.exe
-
Size
25.1MB
-
Sample
241121-l8ylba1mdz
-
MD5
74e44a9a8c2bfcf3688d835c90a2bafb
-
SHA1
35060b8edf9259582498f11521e2ea79fbf6f18c
-
SHA256
0aa6bb21f06690f562ac443279bc02305c8c8852530f08ea768b0f43cbbaba96
-
SHA512
32659f78022315ddd818487845a9e01e0efeb2294b52ae38c4f86fcc5f1e7a8ea708f67814bb4ff6a29ab6ff35d9cdda8029a1e4b039e0b5d7b2e6d3e56afd71
-
SSDEEP
786432:MS+nHbV0ytOPtLxrvS7RIncLtlAlSdfDw3/3sGg8:MS+nH50yQS7RgcLtSywP8GD
Static task
static1
Behavioral task
behavioral1
Sample
Bussin_Napture-portable.paf.exe
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/System.dll
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10ltsc2021-20241023-en
Malware Config
Targets
-
-
Target
Bussin_Napture-portable.paf.exe
-
Size
25.1MB
-
MD5
74e44a9a8c2bfcf3688d835c90a2bafb
-
SHA1
35060b8edf9259582498f11521e2ea79fbf6f18c
-
SHA256
0aa6bb21f06690f562ac443279bc02305c8c8852530f08ea768b0f43cbbaba96
-
SHA512
32659f78022315ddd818487845a9e01e0efeb2294b52ae38c4f86fcc5f1e7a8ea708f67814bb4ff6a29ab6ff35d9cdda8029a1e4b039e0b5d7b2e6d3e56afd71
-
SSDEEP
786432:MS+nHbV0ytOPtLxrvS7RIncLtlAlSdfDw3/3sGg8:MS+nH50yQS7RgcLtSywP8GD
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
192639861e3dc2dc5c08bb8f8c7260d5
-
SHA1
58d30e460609e22fa0098bc27d928b689ef9af78
-
SHA256
23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
-
SHA512
6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
-
SSDEEP
192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
Score3/10 -
-
-
Target
$PLUGINSDIR/nsDialogs.dll
-
Size
9KB
-
MD5
b7d61f3f56abf7b7ff0d4e7da3ad783d
-
SHA1
15ab5219c0e77fd9652bc62ff390b8e6846c8e3e
-
SHA256
89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
-
SHA512
6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8
-
SSDEEP
96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc
Score3/10 -