Overview

overview

5

Static

static

3

R6 Paster ...ts.vbs

windows10-2004-x64

5

R6 Paster ...ts.vbs

windows11-ltsc_2024-x64

5

R6 Paster ...sy.sys

windows10-2004-x64

3

R6 Paster ...sy.sys

windows11-ltsc_2024-x64

3

R6 Paster ...ad.exe

windows10-2004-x64

3

R6 Paster ...ad.exe

windows11-ltsc_2024-x64

3

Release/BeDaisy.sys

windows10-2004-x64

3

Release/BeDaisy.sys

windows11-ltsc_2024-x64

3

Release/Pa...ad.exe

windows10-2004-x64

3

Release/Pa...ad.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    R6_Paster_Six_external.rar
  • Size 5.7MB
  • Sample260804-er487scf87
  • SHA256 ed58764b9e72f68dce01cdc0a94e931dc33873a449c23dfab20096010ccdb475
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
execution

Malware Config

Targets

    • Target
      R6 Paster Six external/reverse/Imgui/imgui_widgets.cpp
    • Size 300KB
    • SHA256 deaca57f37ee6cdb8a50f7f1c5cd96068e61586958e8754ee60dc8c8d83dd214
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    execution

    • Executes a VBScript file via the Windows Script Host.

      execution
    behavioral1behavioral2
    • Target
      R6 Paster Six external/x64/Release/BeDaisy.sys
    • Size 18KB
    • SHA256 35b0d79631b6c0e13569b35fea3371e540e1e24a1ad240aa4095bc003312463b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      R6 Paster Six external/x64/Release/PasterSix RainbowSix made by Overhead.exe
    • Size 1.1MB
    • SHA256 e28ca9a07aa706f04f0fbee73a8e6cfc6df3b28c46d4e47d3676e73dfb8ed783
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      Release/BeDaisy.sys
    • Size 18KB
    • SHA256 35b0d79631b6c0e13569b35fea3371e540e1e24a1ad240aa4095bc003312463b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      Release/PasterSix RainbowSix made by Overhead.exe
    • Size 1.1MB
    • SHA256 e28ca9a07aa706f04f0fbee73a8e6cfc6df3b28c46d4e47d3676e73dfb8ed783
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral10behavioral9

MITRE ATT&CK Enterprise v16

Tasks