0aa6bb21f06690f562ac443279bc02305c8c8852530f08ea768b0f43cbbaba96

General

Target
Bussin_Napture-portable.paf.exe
Size 25.1MB
Sample260720-xtsmascw2l
SHA256 0aa6bb21f06690f562ac443279bc02305c8c8852530f08ea768b0f43cbbaba96
MD5 74e44a9a8c2bfcf3688d835c90a2bafb
SHA1 35060b8edf9259582498f11521e2ea79fbf6f18c
SHA512 32659f78022315ddd818487845a9e01e0efeb2294b52ae38c4f86fcc5f1e7a8ea708f67814bb4ff6a29ab6ff35d9cdda8029a1e4b039e0b5d7b2e6d3e56afd71
SSDEEP 786432:MS+nHbV0ytOPtLxrvS7RIncLtlAlSdfDw3/3sGg8:MS+nH50yQS7RgcLtSywP8GD
TLSH
T14F473307C181EB25E335CBB2DD7914A2D6DA996D517C8EAE3BDC361DC98786FA10E003
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  Bussin_Napture-portable.paf.exe
- Size 25.1MB
- SHA256 0aa6bb21f06690f562ac443279bc02305c8c8852530f08ea768b0f43cbbaba96
- MD5 74e44a9a8c2bfcf3688d835c90a2bafb
- SHA1 35060b8edf9259582498f11521e2ea79fbf6f18c
- SHA512 32659f78022315ddd818487845a9e01e0efeb2294b52ae38c4f86fcc5f1e7a8ea708f67814bb4ff6a29ab6ff35d9cdda8029a1e4b039e0b5d7b2e6d3e56afd71
- SSDEEP 786432:MS+nHbV0ytOPtLxrvS7RIncLtlAlSdfDw3/3sGg8:MS+nH50yQS7RgcLtSywP8GD
- TLSH
  T14F473307C181EB25E335CBB2DD7914A2D6DA996D517C8EAE3BDC361DC98786FA10E003
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
- MD5 192639861e3dc2dc5c08bb8f8c7260d5
- SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
- SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
- SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
- TLSH
  T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
- MD5 b7d61f3f56abf7b7ff0d4e7da3ad783d
- SHA1 15ab5219c0e77fd9652bc62ff390b8e6846c8e3e
- SHA512 6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8
- SSDEEP 96:ooEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YMNqkzfFc:ooEvCu5e81785qHFcU0PuAw0uyyIFc
- TLSH
  T16A12F992E2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D393957A6E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3