432fa9ab122d2285ec07a16d35e8026371477474e8ab3ff9ec53bcf1dad881aa

Sharing

Copy URL Twitter E-mail

General

Target
PaftixKurulum.exe
Size 9.0MB
Sample261018-pnet9aah39
SHA256 432fa9ab122d2285ec07a16d35e8026371477474e8ab3ff9ec53bcf1dad881aa
MD5 75e90734154aec9e2a5bdddd89e55493
SHA1 885630211815fcb0b50e63080a81864defde4731
SHA512 767a3477b3fb0cd9bf4689b926759c194442f2dbe43ec44484680a7971a9841b6e193e36810cbc96bbe102769deec1076e7d7d1ecb9bb61fdfbdd9e578df5f4b
SSDEEP 196608:K2rbQu23GjNzQ/Ch5RUL5dFMZJ+YUuKxux92F/vGG0eZJNOgQ8axF:KIbQuAGC/e5RUtdF0J+//xuxEvdrJ4Wm
TLSH
T10DA633FD3E3908FBFC62423099CA8564434AEC75C4F26EA6CF415367EB746286E255E0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  PaftixKurulum.exe
- Size 9.0MB
- SHA256 432fa9ab122d2285ec07a16d35e8026371477474e8ab3ff9ec53bcf1dad881aa
- MD5 75e90734154aec9e2a5bdddd89e55493
- SHA1 885630211815fcb0b50e63080a81864defde4731
- SHA512 767a3477b3fb0cd9bf4689b926759c194442f2dbe43ec44484680a7971a9841b6e193e36810cbc96bbe102769deec1076e7d7d1ecb9bb61fdfbdd9e578df5f4b
- SSDEEP 196608:K2rbQu23GjNzQ/Ch5RUL5dFMZJ+YUuKxux92F/vGG0eZJNOgQ8axF:KIbQuAGC/e5RUtdF0J+//xuxEvdrJ4Wm
- TLSH
  T10DA633FD3E3908FBFC62423099CA8564434AEC75C4F26EA6CF415367EB746286E255E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $APPDATA/Autodesk/Revit/Addins/2025/Paftix/Microsoft.CodeAnalysis.CSharp.dll
- Size 6.2MB
- SHA256 c46e884a3f2910fd6098b104131cae600c1716ae14b27ffe2d22c54c7f71ff11
- MD5 c031c139a3ba4be2e4866e006fded04f
- SHA1 ca25d8bf4f421d29dce7d3c5154c5a150c669efa
- SHA512 8515917b11a72d735ccfbac1800ad64a03a45cf3864c5bf14a5ad3acdb1ed761f9fd47676cef67596e5dbd2be1e7eb7fdc85b8d6ede2d4e7b9bcce7c84a63f82
- SSDEEP 49152:ueaxFMavmcHyVbQuZqh1GI7LMZIbhngKV0VH3S0UHccQS33XABjgt4BzcYusH/kS:uBSV21jUCV0VH3S0Ut/XABjgt4FkPa
- TLSH
  T1F3666B15D7E89F2AE9AF533AF476202C53F9F8586342D74A1508E5BA2C877004A9F373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  $APPDATA/Autodesk/Revit/Addins/2025/Paftix/Microsoft.CodeAnalysis.dll
- Size 2.8MB
- SHA256 8d919bcf3e2f0e74dc1e79c713f06934201cd2338ad23b9a430e53944ebc0408
- MD5 153bfb3702230d31d2f221c8594ee6ea
- SHA1 5f0076b69ea259a63023d16f90c0f227fdc05b8a
- SHA512 53497197bdefe5ef1c22a6e6cfb32d45d156a141124ec0b8874950003504c1ad3c59772003fd12ed8d9d6d5f23da874fb934d21a14f0be8f571caa40de2f4c47
- SSDEEP 49152:xWL6bCMQqrm4NhVJ6bq3d3WmI8h5XKligtUe5O0fS9:dCMQqrm4NhVJ6m3lXgdi
- TLSH
  T14AD55C01EAF95F6BC57F4B3AF47344C907BBEC9A1742970A6024A5BD2C437228E05E67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  $APPDATA/Autodesk/Revit/Addins/2025/Paftix/Paftix.Core.dll
- Size 2.5MB
- SHA256 8032e71aac171f0e6e05ff852680552735ab902393ac02090e6aa07e27d4dd3f
- MD5 4802311900ff459d1457d86b4219f095
- SHA1 c3a01b665ab185a856fdfe59043f4ff49004ce1f
- SHA512 b68bde05549a320c51248bfbae68e00c3e163e6a96cd5a4e8877bc1d741c39c2c60a409fa325e3ba2adfe046210efb1d1c37e37a865de10908273982b5d871a3
- SSDEEP 24576:44lZKXpi5ErV62Eg+yPa1TxN/EVOIQa8AFZdN8IxtGsVNryS:ci5Er1Eg+5xNeFfN8IxtGsVNryS
- TLSH
  T15DC529146EA8894BE3EE473E98F5270545BAA1133D20FB5F0F44EA50CE4C27F592972E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  $APPDATA/Autodesk/Revit/Addins/2025/Paftix/Paftix.Kod.dll
- Size 15KB
- SHA256 5cd33d86bdcb472e4583b33d9329e73f996ec1076985c52895f19681366e900a
- MD5 b53f1b6dade9e093bf2c3e31ac881507
- SHA1 821a3c8b0ad4111a2db4710fc09ff4d94a60be9d
- SHA512 2c0e0c89f404f24d5a093ae37fefd276cc69d9e993e84738a527ffc17e417a27c7e825cba7e50f0ef8c8b4cb02d50cf438964487d241e0db173f8c08af4ad0bd
- SSDEEP 192:j2Z41EHTvHVgnWrM96iJa+vUDOHpE+YPxEafd1ufxZ+9qii:jefHTv6n6MDk+8DOHsxEafd8xZTii
- TLSH
  T16A62182637EC9367F9FF4B39A9F296104372FA4A6812DA3D094C350E1C177405A92B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  $APPDATA/Autodesk/Revit/Addins/2025/Paftix/Paftix.Revit.dll
- Size 166KB
- SHA256 5c5fe7535adbb729b2b75f38ce1bcbeda356eeac8c1a6a8d213e8ee68837ad3a
- MD5 4d4fe65a212a20ac3e7dd9bdcfb7e0a0
- SHA1 fd7bbbbc2e8462e867c5ce0b21106ceee5cd1158
- SHA512 8846443e14cc1fe53359c3ce520290d5d9d71383d39673484fc44a54a47903c5e6a78596348b21e7b29ba88edaa4ddb3dd5a68b8c7d6887767319b996c98f3c6
- SSDEEP 3072:h87lzgEYjD3qM7fo6WHHApF2sw2rQs4qaCNhDTvXdbelmX1ymSFMhwqv7zWib3x+:h81e39LpF2sw2rQs4qaCNhvXdbqe1LSS
- TLSH
  T1FEF33B0827EC8E15EAFF1B3964F415481B72BA0B9AB7EB4D1CCA65E40D723C09E05767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  $APPDATA/Autodesk/Revit/Addins/2025/Paftix/tr/Microsoft.CodeAnalysis.CSharp.resources.dll
- Size 430KB
- SHA256 76c1f8a8bd7d748170cf0e9b93039fb2bc2ee074ba19eedc10f9a9bc026ec197
- MD5 409ebc320dd05403622d3c6d7d192207
- SHA1 abe2fcc66f3efd6e2e59d30f960981680cbbb085
- SHA512 8b108372e5d484dda29f3108348540590d8dbbce65ec0ee4076e9ed3e00d463640742f7f4bbd80088be733ac1be66285518677e93fafe4821e248d338261a38e
- SSDEEP 6144:OtiZmnuQ3CPmQNAFNTy4q+eqJ+dHuqKXgOfc/LNiwzp79aoupOteocyIs0KHTBSu:RtqJ+DX3IzRU
- TLSH
  T19A94A401B6FD241CF3F71BD9BBF6851ADD6B7DA22B21C24D10094B1F17A4B8286A1736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  $APPDATA/Autodesk/Revit/Addins/2025/Paftix/tr/Microsoft.CodeAnalysis.resources.dll
- Size 47KB
- SHA256 660fa2661a524dd05402991750509edb72c5cce4ddec9cdc56126c1e1c50bcdc
- MD5 1ff755b660625ba428d7ceb68c9082fe
- SHA1 f564b162cf86e440ada471b1e78803d8aa50a6ec
- SHA512 30b9ff878def41d8147045344cc466f159763cdebde834b47481ffd77bba37f380073b5d7def4816ae2d592fbae0f1b6d8a3b5e84c2d58b26cab0a0fca138d7e
- SSDEEP 768:3w8HccQcF9wpnxC6giKChMYTTYbEJyp7WGF2KfWjU9z9:gwQc0FDhjTYbEO7WGF2KfWYz9
- TLSH
  T1B123B641BBF9200DF6F71F75BAB8865A9C7FBE923D21D05D0001860E1A72B85CAA5737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  $APPDATA/Autodesk/Revit/Addins/2026/Paftix/Microsoft.CodeAnalysis.CSharp.dll
- Size 6.2MB
- SHA256 c46e884a3f2910fd6098b104131cae600c1716ae14b27ffe2d22c54c7f71ff11
- MD5 c031c139a3ba4be2e4866e006fded04f
- SHA1 ca25d8bf4f421d29dce7d3c5154c5a150c669efa
- SHA512 8515917b11a72d735ccfbac1800ad64a03a45cf3864c5bf14a5ad3acdb1ed761f9fd47676cef67596e5dbd2be1e7eb7fdc85b8d6ede2d4e7b9bcce7c84a63f82
- SSDEEP 49152:ueaxFMavmcHyVbQuZqh1GI7LMZIbhngKV0VH3S0UHccQS33XABjgt4BzcYusH/kS:uBSV21jUCV0VH3S0Ut/XABjgt4FkPa
- TLSH
  T1F3666B15D7E89F2AE9AF533AF476202C53F9F8586342D74A1508E5BA2C877004A9F373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  $APPDATA/Autodesk/Revit/Addins/2026/Paftix/Microsoft.CodeAnalysis.dll
- Size 2.8MB
- SHA256 8d919bcf3e2f0e74dc1e79c713f06934201cd2338ad23b9a430e53944ebc0408
- MD5 153bfb3702230d31d2f221c8594ee6ea
- SHA1 5f0076b69ea259a63023d16f90c0f227fdc05b8a
- SHA512 53497197bdefe5ef1c22a6e6cfb32d45d156a141124ec0b8874950003504c1ad3c59772003fd12ed8d9d6d5f23da874fb934d21a14f0be8f571caa40de2f4c47
- SSDEEP 49152:xWL6bCMQqrm4NhVJ6bq3d3WmI8h5XKligtUe5O0fS9:dCMQqrm4NhVJ6m3lXgdi
- TLSH
  T14AD55C01EAF95F6BC57F4B3AF47344C907BBEC9A1742970A6024A5BD2C437228E05E67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  $APPDATA/Autodesk/Revit/Addins/2026/Paftix/Paftix.Core.dll
- Size 2.5MB
- SHA256 8032e71aac171f0e6e05ff852680552735ab902393ac02090e6aa07e27d4dd3f
- MD5 4802311900ff459d1457d86b4219f095
- SHA1 c3a01b665ab185a856fdfe59043f4ff49004ce1f
- SHA512 b68bde05549a320c51248bfbae68e00c3e163e6a96cd5a4e8877bc1d741c39c2c60a409fa325e3ba2adfe046210efb1d1c37e37a865de10908273982b5d871a3
- SSDEEP 24576:44lZKXpi5ErV62Eg+yPa1TxN/EVOIQa8AFZdN8IxtGsVNryS:ci5Er1Eg+5xNeFfN8IxtGsVNryS
- TLSH
  T15DC529146EA8894BE3EE473E98F5270545BAA1133D20FB5F0F44EA50CE4C27F592972E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  $APPDATA/Autodesk/Revit/Addins/2026/Paftix/Paftix.Kod.dll
- Size 15KB
- SHA256 5cd33d86bdcb472e4583b33d9329e73f996ec1076985c52895f19681366e900a
- MD5 b53f1b6dade9e093bf2c3e31ac881507
- SHA1 821a3c8b0ad4111a2db4710fc09ff4d94a60be9d
- SHA512 2c0e0c89f404f24d5a093ae37fefd276cc69d9e993e84738a527ffc17e417a27c7e825cba7e50f0ef8c8b4cb02d50cf438964487d241e0db173f8c08af4ad0bd
- SSDEEP 192:j2Z41EHTvHVgnWrM96iJa+vUDOHpE+YPxEafd1ufxZ+9qii:jefHTv6n6MDk+8DOHsxEafd8xZTii
- TLSH
  T16A62182637EC9367F9FF4B39A9F296104372FA4A6812DA3D094C350E1C177405A92B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  $APPDATA/Autodesk/Revit/Addins/2026/Paftix/Paftix.Revit.dll
- Size 166KB
- SHA256 d5c0c09e80cc8d5a9cb04b371cce56c6c8a0806998ce081dd0fa4561b553cdd7
- MD5 5f476b7d880c87e43b5381a5f28526a0
- SHA1 1da8f58dece04c3de14a2ef98860b1c201ad9b56
- SHA512 9c8bed25c90ad22d6813b7a728a99dae76a5fd652ac866c74ee5cdf18a6c0087de81becde47bac0127c6ce323d58b9a043353c76150a9a96ed5e1f578b717ecf
- SSDEEP 3072:T87lzgEYjD3qM7fo6WHHApF2sw2rQs4qaCNhDTvXdbelmX1ymSFMdwqv7zWib3x+:T81e39LpF2sw2rQs4qaCNhvXdbqe1LSe
- TLSH
  T1ECF33B0827EC8E15EAFF1B3964F415481B72BA0B9AB7EB4D1CCA65E40D723C09E05767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  $APPDATA/Autodesk/Revit/Addins/2026/Paftix/tr/Microsoft.CodeAnalysis.CSharp.resources.dll
- Size 430KB
- SHA256 76c1f8a8bd7d748170cf0e9b93039fb2bc2ee074ba19eedc10f9a9bc026ec197
- MD5 409ebc320dd05403622d3c6d7d192207
- SHA1 abe2fcc66f3efd6e2e59d30f960981680cbbb085
- SHA512 8b108372e5d484dda29f3108348540590d8dbbce65ec0ee4076e9ed3e00d463640742f7f4bbd80088be733ac1be66285518677e93fafe4821e248d338261a38e
- SSDEEP 6144:OtiZmnuQ3CPmQNAFNTy4q+eqJ+dHuqKXgOfc/LNiwzp79aoupOteocyIs0KHTBSu:RtqJ+DX3IzRU
- TLSH
  T19A94A401B6FD241CF3F71BD9BBF6851ADD6B7DA22B21C24D10094B1F17A4B8286A1736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  $APPDATA/Autodesk/Revit/Addins/2026/Paftix/tr/Microsoft.CodeAnalysis.resources.dll
- Size 47KB
- SHA256 660fa2661a524dd05402991750509edb72c5cce4ddec9cdc56126c1e1c50bcdc
- MD5 1ff755b660625ba428d7ceb68c9082fe
- SHA1 f564b162cf86e440ada471b1e78803d8aa50a6ec
- SHA512 30b9ff878def41d8147045344cc466f159763cdebde834b47481ffd77bba37f380073b5d7def4816ae2d592fbae0f1b6d8a3b5e84c2d58b26cab0a0fca138d7e
- SSDEEP 768:3w8HccQcF9wpnxC6giKChMYTTYbEJyp7WGF2KfWjU9z9:gwQc0FDhjTYbEO7WGF2KfWYz9
- TLSH
  T1B123B641BBF9200DF6F71F75BAB8865A9C7FBE923D21D05D0001860E1A72B85CAA5737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  $APPDATA/Autodesk/Revit/Addins/2027/Paftix/Microsoft.CodeAnalysis.CSharp.dll
- Size 6.2MB
- SHA256 c46e884a3f2910fd6098b104131cae600c1716ae14b27ffe2d22c54c7f71ff11
- MD5 c031c139a3ba4be2e4866e006fded04f
- SHA1 ca25d8bf4f421d29dce7d3c5154c5a150c669efa
- SHA512 8515917b11a72d735ccfbac1800ad64a03a45cf3864c5bf14a5ad3acdb1ed761f9fd47676cef67596e5dbd2be1e7eb7fdc85b8d6ede2d4e7b9bcce7c84a63f82
- SSDEEP 49152:ueaxFMavmcHyVbQuZqh1GI7LMZIbhngKV0VH3S0UHccQS33XABjgt4BzcYusH/kS:uBSV21jUCV0VH3S0Ut/XABjgt4FkPa
- TLSH
  T1F3666B15D7E89F2AE9AF533AF476202C53F9F8586342D74A1508E5BA2C877004A9F373
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32