Overview

overview

8

Static

static

8

Pitch Blac...n2.tmp

windows7-x64

3

Pitch Blac...n2.tmp

windows10-2004-x64

3

Pitch Blac...gg.tmp

windows7-x64

3

Pitch Blac...gg.tmp

windows10-2004-x64

3

Pitch Blac...or.tmp

windows7-x64

3

Pitch Blac...or.tmp

windows10-2004-x64

3

Pitch Blac...n2.tmp

windows7-x64

3

Pitch Blac...n2.tmp

windows10-2004-x64

3

Pitch Blac...e1.tmp

windows7-x64

3

Pitch Blac...e1.tmp

windows10-2004-x64

3

Pitch Blac...e2.tmp

windows7-x64

3

Pitch Blac...e2.tmp

windows10-2004-x64

3

Pitch Blac...k1.tmp

windows7-x64

3

Pitch Blac...k1.tmp

windows10-2004-x64

3

Pitch Blac...gg.tmp

windows7-x64

3

Pitch Blac...gg.tmp

windows10-2004-x64

3

Pitch Blac...k2.tmp

windows7-x64

3

Pitch Blac...k2.tmp

windows10-2004-x64

3

Pitch Blac...gh.tmp

windows7-x64

3

Pitch Blac...gh.tmp

windows10-2004-x64

3

Pitch Black/Game.exe

windows7-x64

6

Pitch Black/Game.exe

windows10-2004-x64

1

Pitch Black/Game.ini

windows7-x64

1

Pitch Black/Game.ini

windows10-2004-x64

1

Pitch Blac...rgss3a

windows7-x64

3

Pitch Blac...rgss3a

windows10-2004-x64

3

Pitch Blac...h2.png

windows7-x64

1

Pitch Blac...h2.png

windows10-2004-x64

3

Pitch Blac...h3.png

windows7-x64

1

Pitch Blac...h3.png

windows10-2004-x64

3

Pitch Black/Setup.exe

windows7-x64

1

Pitch Black/Setup.exe

windows10-2004-x64

7

Resubmissions

03-10-2022 11:26

221003-nj9cmadff8 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Pitch Black.rar

  • Size

    136.6MB

  • Sample

    221003-nj9cmadff8

  • MD5

    7378676bff25614a4807c8e387be78e1

  • SHA1

    567b48b370dcd6ff0c84fb03e011d9f0a253d287

  • SHA256

    b385ce3e5717c49e2f61516c9f9e68449e111a557979a1f1ac28798d5fba9dc5

  • SHA512

    19ad0f2a2de0ca31c9692596400a7a920eb7ac216fce04fdcb401ed84405a1ef8a8a2895d730a24c79dcb353c9c20676c9abe76fdb8bd6d75f85297eea1a4074

  • SSDEEP

    3145728:+0Lqp+O0GvoxT6nq0bhk9u8WU31e4Zp+KUkyYjc8VcQBLklmz1:+cqpXognq0Nbm1eK6kyYg87hcmB

Score
8/10
aspackv2bootkitpersistencespywarestealer

Malware Config

Targets

    • Target

      Pitch Black/Audio/SE/slidingdoor-open2.tmp

    • Size

      27KB

    • MD5

      8a25eab2e8953396cf115f25557dae56

    • SHA1

      bde06a9ef781908b57f9a421b8b51435fc709c32

    • SHA256

      82b56633b692a4ac076fdbc2936f6422f968769437f3ef0d002e75e9287c3565

    • SHA512

      4e459acfc04ce0dfd8477253c32aff75e930a0c0cb7d37f03e2fa5ab10f061ba96c3956d71f80fd5d3f81f7e4faad93aeea119d7b34744119d756dc75e47cdb4

    • SSDEEP

      768:Qy8SZ+XdEwmXnSB0wpe2DYs0NQXvq96R2nXcWSYs9:/8SjSlpFDL0NQCgR2nXcvYE

    Score
    3/10
    behavioral1behavioral2

    • Target

      Pitch Black/Audio/SE/stone1.ogg.tmp

    • Size

      8KB

    • MD5

      8c9660313ea55ac52536592f9a6c9a59

    • SHA1

      0db4b21cc53718b24175cb53da0667bb5deaadbf

    • SHA256

      70b0006f5ca1fde97edf7704973ac39f9823366345dc8b93a6bdd9424f6174f4

    • SHA512

      69c6e5b1fc93054454ab51e1a9b9fa60aab1bfd893111069e68a91f42b2396bad51fd9ba897447f330f0be919171da4d06a57ead933ab1cbc4f31de9781acfc2

    • SSDEEP

      192:JrttxOIOWOKxCPs4OLpVocOaxlgJyhDONztDFD:RtDzCPwocbYyAztJD

    Score
    3/10
    behavioral3behavioral4

    • Target

      Pitch Black/Audio/SE/terror.tmp

    • Size

      134KB

    • MD5

      f5d53f8e92e223c20fb0848d9eeb6420

    • SHA1

      ee93b049c9f11c8934f1043f73c3b1842a9332b9

    • SHA256

      b7f50b6c5fd4b013beb98ff4f9a46e8b827aa46d1f7b90de150e9e54580b0eb4

    • SHA512

      5884fed3b53c28ac2212d6e7e26ae36e057f27d961432ebafbc5c6acbe5fbcb5a6609fb635dbb14b0c0c6317c3e6477234b5008a822df8acbd3c1884e347f8db

    • SSDEEP

      3072:1PkkHF8bLnnX9ruZBriHwz3WU9yifiFgXlClhT5H0tYi6zGTO:lHF2LnX9AB+iD9XiTb50T4D

    Score
    3/10
    behavioral5behavioral6

    • Target

      Pitch Black/Audio/SE/tin2.tmp

    • Size

      93KB

    • MD5

      e56a9e0e319c6e2d84af492d07765be3

    • SHA1

      586c1a2b0f61f4b247acc32af7db387c45bb25dd

    • SHA256

      a6800d4844367bede88f701877d307988a634d66375229fe6703b31ff1cf223c

    • SHA512

      feeb07b3337a694fe5f4ed53015710fa9a24bf55bad85ad22aae740acbdd18ef6c57f1a6dd7f7937d180194fae17d79208b297f41f3b6ea531a8b409ab4913fc

    • SSDEEP

      1536:Iysy/l70Uoxw8+XxEwZgvI7cvtRGrWvNlls92GE1lyyPMh0xN+1rBF5ld6v+J+uW:r/9/sw80BZgvISqSS92HyyPMLlF5P6vP

    Score
    3/10
    behavioral7behavioral8

    • Target

      Pitch Black/Audio/SE/voice1.tmp

    • Size

      18KB

    • MD5

      035084f6dcd2f796df9e18ca34ea7659

    • SHA1

      7919083b54098b05c4354f200fdb25be633baa68

    • SHA256

      5b7a49a6694f312592ddd17f2a4e962bbd6f3784cdb3389d990cb386e27d9bf1

    • SHA512

      bdd10a3a7c8d58653b19df7770d8a7903a4badf7fe56be8343e28247cbc41724a66f9162a20fe5aea11436cf9e678e91cca568736ebbc1874dda486c114fd4e9

    • SSDEEP

      384:NtDzCP6QgIyfG6YhfVPpNRd31IzYHILdy8Gr:N4PdyfGx17dl2YHA0

    Score
    3/10
    behavioral9behavioral10

    • Target

      Pitch Black/Audio/SE/voice2.tmp

    • Size

      18KB

    • MD5

      b160f767d8ea52059e68c101c9a245be

    • SHA1

      91e62fc4e58c3dbeb9da34e722e42c9b5f310e3d

    • SHA256

      d3f1213ea780199749257a5c2b41417fb771ea7616ccda40122ff170856614e8

    • SHA512

      0db9c07cc352d903b6cfcdebdcfef280530ce668445fc8bc1be4a2283386cb70cccb7466555db73a4355d6739399aaddfa68ae566992bbdb5d562b3603479628

    • SSDEEP

      384:2tDzCPuL+mPKw8nxR34H0Va1h0hAlsBqjDo7ERhslW:24PlmCw8W0VakhYsUj87ERhslW

    Score
    3/10
    behavioral11behavioral12

    • Target

      Pitch Black/Audio/SE/walk1.tmp

    • Size

      7KB

    • MD5

      26ec76445911fd7abaff91beb7043378

    • SHA1

      3c750c1a7dafce60de23a92dc6d37e735297ecde

    • SHA256

      21ebd40bddafc347faba012750f02b86f990dd5e309838494d8681b17a2a5e95

    • SHA512

      f26b3852720b47461ee483d309aeda3e692e010d058bca00764416e50e0db4c61b4702a8547e2001747d7f75f73c256e0bcfcb31bdaec6149d89ab93eb22f2ec

    • SSDEEP

      192:MrttxOIOWOKxCPs4OLfwpB71XTaXSHQ7azjH:EtDzCPfpB7WSmaPH

    Score
    3/10
    behavioral13behavioral14

    • Target

      Pitch Black/Audio/SE/walk2.ogg.tmp

    • Size

      6KB

    • MD5

      d9727cc4691e6c22e46b1e0dc90198fb

    • SHA1

      f2d70f7b014a7a59294442d151c3138658eed091

    • SHA256

      47f334f80651c6a784b7360af94aab754c9a5aef06e82c5b2c18ed27996b8e3d

    • SHA512

      3f4645ddb3e6854e0fabb9b9ab1c18a6da46f2fc377bba3acbd0c5319317e7f90f9109efc19741389aa54090bfe2bd4bed25aeb9cdae27f34d26ab7ae4e4b9a0

    • SSDEEP

      96:7MbBoqxPmBodq9y9W0WTFuTX7lq9CQO9EcTRb6j7c3um+CYno6iCUeIo3nEuA:YttxOqdm9TTYlqgwuRb6eNYnouUn0n0

    Score
    3/10
    behavioral15behavioral16

    • Target

      Pitch Black/Audio/SE/walk2.tmp

    • Size

      6KB

    • MD5

      d9727cc4691e6c22e46b1e0dc90198fb

    • SHA1

      f2d70f7b014a7a59294442d151c3138658eed091

    • SHA256

      47f334f80651c6a784b7360af94aab754c9a5aef06e82c5b2c18ed27996b8e3d

    • SHA512

      3f4645ddb3e6854e0fabb9b9ab1c18a6da46f2fc377bba3acbd0c5319317e7f90f9109efc19741389aa54090bfe2bd4bed25aeb9cdae27f34d26ab7ae4e4b9a0

    • SSDEEP

      96:7MbBoqxPmBodq9y9W0WTFuTX7lq9CQO9EcTRb6j7c3um+CYno6iCUeIo3nEuA:YttxOqdm9TTYlqgwuRb6eNYnouUn0n0

    Score
    3/10
    behavioral17behavioral18

    • Target

      Pitch Black/Audio/SE/yandereLaugh.tmp

    • Size

      143KB

    • MD5

      26a4f1f9c0b8c88d147210afd3be793f

    • SHA1

      9f71a0cc643cb8c1a004d1cd0ca5487dd9660ab9

    • SHA256

      053b8a6a22fa28968a22a8dcba3680ca5583d95526b4ac1ead72edbcd2ddf269

    • SHA512

      b6bc9be47a1ca6be2cc88012ca9b5cc235abe1f2ba50d883424f21bc10d393b46063e86e9a0e98a2f96f9b425f8243fc2ae1f77e4a3150197cae9634638ed2ba

    • SSDEEP

      3072:wcDfEffiri9oHUaMCKERETzTiBOyqYKKbvFHt6vyFlSj:O7SU7TuuiBOPYbvFHt6vyFlSj

    Score
    3/10
    behavioral19behavioral20

    • Target

      Pitch Black/Game.exe

    • Size

      154KB

    • MD5

      0be6d562ad1226912a929c9f5494e660

    • SHA1

      17028bf0dbdba42a904543cad1ec9da1278aca3b

    • SHA256

      c0f23f8c188c04cced5d8295b773e6bbc6c78afe9050cf0ef13176e26e783a96

    • SHA512

      35d497c5782a0a7cf20d20bdf10cc5840004752dff16d6d05d559596875e498b8819ed5477188abbdea0a17c9c4b38b4bf7596732dc4a4d293f986abb4696a7e

    • SSDEEP

      3072:5WK+I+/wslzo5PaLpe5rWhKri38yR8K+:5WK+xZAaqKMi3W

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral21behavioral22

    • Target

      Pitch Black/Game.ini

    • Size

      94B

    • MD5

      7f0b8ad542e261041843614a8ce858dd

    • SHA1

      20cab0e2fea1e4327a05a80eaa0d1a98cbb0b9e4

    • SHA256

      a64e3571fc2d1f22b1abe80d793636f5c2df5fe6a8a7bbc526c000d4d900e701

    • SHA512

      c1b985657aa05fca90fe4549c52d337025a8c2fb2aca3c64207acf21eea86d402e3e55b75929ea0b23787353eb3b61a3922d73f642c63cee0cd6c95470d211e2

    Score
    1/10
    behavioral23behavioral24

    • Target

      Pitch Black/Game.rgss3a

    • Size

      91.6MB

    • MD5

      c58f67f79881e3f790b38e90e2e8f1fa

    • SHA1

      c12cc5fc83bdbaf53dd4f402ce3917e66a43b1ee

    • SHA256

      c28c046211076958fab1f81f5bfc7724377ecc4bb1afcda4f6b1f4751148be31

    • SHA512

      0647f88686ffa33e0fa493c6b9512a3204758f811767a1c3c6674a60d55b0a7aa288283d96a2a5352c01d0bec438305addef782bad132d4f7510ce2486327a5a

    • SSDEEP

      1572864:sVUOMo7XDaPiqviFbwCtG3f+UjdvuIyBqAVtMIUQ4B3ojTVR+8uexmhYSsbIL:gnvnFvs3fjm3BqAtZNWojJR+8uexmubw

    Score
    3/10
    behavioral25behavioral26

    • Target

      Pitch Black/Graphics/Splash/Splash2.png

    • Size

      6KB

    • MD5

      a0ddbfe02c13ab68078c2524603b68bb

    • SHA1

      7b31917f2b1b9c0dcff362a60441bec8e0e7b0a9

    • SHA256

      60121680cae4d689877df46bd83e0e2999fc05c01c876c76b1193fb3262f254d

    • SHA512

      2fe7bd08104aa6ebc9bd78543bf9d363c18b164c898b0a2291c19d8bfddd28af5485c85eb05321969be118c3b1002c93b2c53c64d3562c7602681540f8600cce

    • SSDEEP

      96:FZ/I09Da01l+gmkyTt6Hk8nTddaTTJvXrTmL0Mj6PwmiBjWO9:FS0tKg9E05TddaXJvXre4I5l9

    Score
    3/10
    behavioral27behavioral28

    • Target

      Pitch Black/Graphics/Splash/Splash3.png

    • Size

      14KB

    • MD5

      251bc14e3cd5cc8082962bd00c8d8fc5

    • SHA1

      206ef566ca26f431da6db3a5512bd699d4ec9795

    • SHA256

      60017b3ca46ad857d4948e6eab24b80f7372b4d2c07b77ab8577e0b59aef6b8c

    • SHA512

      7f3e694c253cb00df5b6dc4ba752430cd1b8eb08ef2c4667a04c3df97d48d0cbc6b4f8e6776ba4f162eb0d08838b3d17a9d0e0538b5bc741fc19e196b5421e38

    • SSDEEP

      192:vS0tKg9E05T5oadaOD9NOB1eF+Nk/cPqXBIqaDTV7qadcDlnapEPV2QuzrMF34vj:1XE05FovqNOx3Pqvh+EPV/urU3u4tRa

    Score
    3/10
    behavioral29behavioral30

    • Target

      Pitch Black/Setup.exe

    • Size

      36.8MB

    • MD5

      630090a5a0ac61127dd09be7f622de81

    • SHA1

      997dc4618a87aded201f261f22280446f69591ad

    • SHA256

      08db81493a2799ca77f5b520461301cad6c8368458d9b410fcb5d72cf98d61d4

    • SHA512

      e94870cfe18d3ae81e4fee3ec3af6c20dd4177ae35f2c57cb2c0c4f9150ace52725b0e1d8039553ecb95c8cdc6cb39d0c89ee6e944ff3500721117564a8fd4c3

    • SSDEEP

      393216:PudOqgHWtfcf5DAh9m0LRiHrzSbGpmdXnfbm4vgOEKXDmfB4kpf/ZrYsK1/QYmfh:Pie2YxA1gUuBh/ZrYfCvx0P2P

    Score
    7/10
    spywarestealer

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral31behavioral32

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

System Information Discovery

13
T1082

Process Discovery

1
T1057

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks

static1

aspackv2
Score
8/10

behavioral1

Score
3/10

behavioral2

Score
3/10

behavioral3

Score
3/10

behavioral4

Score
3/10

behavioral5

Score
3/10

behavioral6

Score
3/10

behavioral7

Score
3/10

behavioral8

Score
3/10

behavioral9

Score
3/10

behavioral10

Score
3/10

behavioral11

Score
3/10

behavioral12

Score
3/10

behavioral13

Score
3/10

behavioral14

Score
3/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

Score
3/10

behavioral18

Score
3/10

behavioral19

Score
3/10

behavioral20

Score
3/10

behavioral21

bootkitpersistence
Score
6/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
3/10

behavioral26

Score
3/10

behavioral27

Score
1/10

behavioral28

Score
3/10

behavioral29

Score
1/10

behavioral30

Score
3/10

behavioral31

Score
1/10

behavioral32

spywarestealer
Score
7/10