Overview

overview

3

Static

static

Pacify/Eng...64.dll

windows7-x64

1

Pacify/Eng...64.dll

windows10-2004-x64

1

Pacify/Eng...in.dll

windows7-x64

1

Pacify/Eng...in.dll

windows10-2004-x64

1

Pacify/Eng...64.dll

windows7-x64

3

Pacify/Eng...64.dll

windows10-2004-x64

3

Pacify/Eng...64.dll

windows7-x64

1

Pacify/Eng...64.dll

windows10-2004-x64

1

Pacify/Eng...64.dll

windows7-x64

1

Pacify/Eng...64.dll

windows10-2004-x64

1

Pacify/Eng...64.dll

windows7-x64

1

Pacify/Eng...64.dll

windows10-2004-x64

1

Pacify/Eng...64.dll

windows7-x64

1

Pacify/Eng...64.dll

windows10-2004-x64

1

Pacify/Eng...64.dll

windows7-x64

3

Pacify/Eng...64.dll

windows10-2004-x64

3

Pacify/Eng...64.dll

windows7-x64

3

Pacify/Eng...64.dll

windows10-2004-x64

3

Pacify/Eng...64.dll

windows7-x64

3

Pacify/Eng...64.dll

windows10-2004-x64

3

Pacify/Eng...64.dll

windows7-x64

3

Pacify/Eng...64.dll

windows10-2004-x64

3

Pacify/Eng...64.dll

windows7-x64

1

Pacify/Eng...64.dll

windows10-2004-x64

1

Pacify/Eng...64.dll

windows7-x64

1

Pacify/Eng...64.dll

windows10-2004-x64

1

Pacify/Eng...64.dll

windows7-x64

3

Pacify/Eng...64.dll

windows10-2004-x64

3

Pacify/Eng...64.dll

windows7-x64

3

Pacify/Eng...64.dll

windows10-2004-x64

3

Pacify/Eng...64.dll

windows7-x64

1

Pacify/Eng...64.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Pacify.rar

  • Size

    668.0MB

  • Sample

    221227-vj8jnaae5z

  • MD5

    7f07a5b9f8a415885acb9c71b0e46acb

  • SHA1

    8ebd5e210700b5871ed7668dcfe298a5629b4308

  • SHA256

    bfbfde8feb882ebd5315c2dee85cbb01af5806d208c910a010e8daebbd273077

  • SHA512

    bb9684de2969e38e5bd72d8390dfaab9513595ff5aa92ede7cdd3fb5118889a7b5ee5a88caec35de796d171746e7d9893ef34d027fe47466dbf1dbabd61540f9

  • SSDEEP

    12582912:NBvzISoXZEZqvcz+M+73SUKbU5STJTWb2mmGSXX1H+w7HJGKt4GE8xPjG0hZh:NtISwZ+qvczF+bTKQOMb2zGSn1H/7oK/

Score
3/10

Malware Config

Targets

    • Target

      Pacify/Engine/Binaries/ThirdParty/NVIDIA/NVaftermath/Win64/GFSDK_Aftermath_Lib.x64.dll

    • Size

      115KB

    • MD5

      efd88ddde0324de8d9a2d0460b4e731e

    • SHA1

      26fc0fa7d47ac99c99465a7a5176b3de49bb14d9

    • SHA256

      41e6d6e6b691b8aca94aa35bf04e7a204f02ec843e192cc4d28f421ec517934a

    • SHA512

      83e7e817d122e90daa24db80aa0e6179a661f215c71ef71fd7c1b9e378b6b68e957b74cdf71471ac8a8491002bba762fef3fcd09873bdff4b917339638b12002

    • SSDEEP

      3072:vL1w8yONQj23ta735JRF/CV8m4q1aj8tPlUgQk2VhLxhwxMaYMp:qBj23AT/R1E

    Score
    1/10
    behavioral1behavioral2

    • Target

      Pacify/Engine/Binaries/ThirdParty/Oculus/OVRPlugin/OVRPlugin/Win64/OVRPlugin.dll

    • Size

      2.3MB

    • MD5

      cdfb1e97ff57ce110c2f63a5383f7a73

    • SHA1

      0ceace821678a944e48f281974a217857e57ee08

    • SHA256

      e62a17ffc9c781eea53c237eee560b56d8e3624b3f56bd5533ed8c2bd17a6023

    • SHA512

      287504e7e7c6c5650e59f5db167b36ff57d4f2aa3dca75af7a0e3c1610ad1fd02ebde712f8c1afa340b187b28a169afe678868fa2e11e43afe242df221098802

    • SSDEEP

      49152:rNGD5YVFvKcq2YCMMFvWFJlpNVR6ATY6/zaECvKMA:dEhlZGI

    Score
    1/10
    behavioral3behavioral4

    • Target

      Pacify/Engine/Binaries/ThirdParty/Ogg/Win64/VS2015/libogg_64.dll

    • Size

      48KB

    • MD5

      cd1f16736ccc5dd8c8ce8525957f4cfb

    • SHA1

      654144e0ddedc26b0b3be8e6562784abad1b471f

    • SHA256

      284a6e70a6dce01f8a02d93e1bb78baf0efb6140459c587d8986d59fb6bd675b

    • SHA512

      357df96397e21662194a30ce7f5d53cc202fcc464e1c06312eb12031c5683305638b7e674e5b4b758e142facb00963a53c419c430ea2b419b62f97c14b4812af

    • SSDEEP

      384:GRKN7KRked7VWjLmPnUunFqphqaNQL2PnQftfKNRvrzAcojOYPu:dkSQyQUuFq19HAhjXu

    Score
    3/10
    behavioral5behavioral6

    • Target

      Pacify/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/APEX_ClothingPROFILE_x64.dll

    • Size

      1.5MB

    • MD5

      38e3cbe0f98d452e889a4131a0aca8ab

    • SHA1

      9d16db59640f07d917ace0b5fde5339c36f88d04

    • SHA256

      05079137ac9bb8a6c468fcc0ee22c7c81cae07ec49dc8a7b6cf92888919b1be9

    • SHA512

      10ce274172d9f753635420024cca2ae60e324b456686ead4e8fde3a6d644e489fe5abcaa91b5d0edb57670978f58b3337d28448f49db8569fe9b22f96b2ee39a

    • SSDEEP

      12288:tysu6Buh7mPtMbmWts/jLUUKasAWqg1Fbtk5ZpMs0098Efl1KdbEXkA9AW36tED:Msu6Bu4PDj/j4ctzjL998Ef6dbEf

    Score
    1/10
    behavioral7behavioral8

    • Target

      Pacify/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/APEX_Clothing_x64.dll

    • Size

      1.2MB

    • MD5

      63b1491b3671a3ea750ebf124ab2cbb9

    • SHA1

      ed8e5ae5a3444db4b46a0027b0a101b0e42aed61

    • SHA256

      93c6d14956e4e5857b40a66f2ad8f7c00e29e95ef9c6b667bfb9441fad3c031f

    • SHA512

      630ce87d44156db04707f629e137748a63707300aa090684190a79716ca29a72f8483dddbfbcb8bb0b6354c0cc41f289197192bd5a3762d414996bc42fc5997e

    • SSDEEP

      24576:7+IVzBPVs0Icf0rRrQWPfHMBc5afUJaPPZ:7+I5BtacORrQcfsO5af0k

    Score
    1/10
    behavioral10behavioral9

    • Target

      Pacify/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/APEX_LegacyPROFILE_x64.dll

    • Size

      4.0MB

    • MD5

      b420002a589e239dc0ecf2999952d4fe

    • SHA1

      6893d1b68d6cfabaddd77e976ac82ad73533c2d7

    • SHA256

      af4dc3a85817a1f56f7f226ba270c64745b9f5603a0b77bb9375e883647ccf94

    • SHA512

      494d427b309b67940d53ad163e7be1714e373fbdf7467fd81c87f23ba96dd1c74063d18bc1d981906dcc7605fe8af6ec0c93785fe52dd7927899f25ba3ca4444

    • SSDEEP

      49152:n4H8LmnZdx+jqbXXmp8TH5qQFrpOLe2Zi:5CZdbeu732e2Z

    Score
    1/10
    behavioral11behavioral12

    • Target

      Pacify/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/APEX_Legacy_x64.dll

    • Size

      3.2MB

    • MD5

      b032f92eceb884600f12bce09fe1053c

    • SHA1

      2f7555bc136110c80fa922d3244934948f034da1

    • SHA256

      432f2650a4e3eab986e6e3a0aa338f1b107a2989c852da2a40b8dba35425cfb3

    • SHA512

      08b0437a6b8c73ca0ccbe6d2b73823390702934bc06011e0e80fa6b08d2f34c0973e30c59b20f71535d4c9e7e70f0d74bb48969aaf485acc3a4ff25b1869abcf

    • SSDEEP

      49152:nDqSeaReZShEdCoBtKMZLX9dQBJVnggSs:niOZV

    Score
    1/10
    behavioral13behavioral14

    • Target

      Pacify/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/ApexFrameworkPROFILE_x64.dll

    • Size

      1.3MB

    • MD5

      9cf7b36d85f3c8b8bad5045ef1433f8f

    • SHA1

      1d7276fe42d898f9e9e7111c66feaec2587a658a

    • SHA256

      c98e92b7fe8496677eef332b1cade31877a649f039ad72383f97efc11ab88061

    • SHA512

      56cf82923eacc925840a579cfa7e0629df79a4ed8f7f414a2f6f33ebd1945a49a72f30b7d2eaea280e4c6e2fa9a9caab25d48ef4143b65c39dcc4ac59d0498e4

    • SSDEEP

      12288:H97gYy8zuxfE6+A25k+R3BnkIGlYTtxS6/K52vndl62DjMZBx:HSV8zIOhk0RnkIikxSGK0vndw

    Score
    3/10
    behavioral15behavioral16

    • Target

      Pacify/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/ApexFramework_x64.dll

    • Size

      1020KB

    • MD5

      cef5601c692e7b37f2369f05c313cec0

    • SHA1

      805f02bd216753c4a4c10e8a881d78ddbb622a16

    • SHA256

      5134187c718714cb47a3942a63dc43fea36928745adeedc98990b34392864617

    • SHA512

      ad20f05157fa076e725d16e7016a6040ff22c66b2db0b648ad7d30891a9fd7642c7f74612898f158d891218485f01246e92066b32217ba8aca2e246b97d197b2

    • SSDEEP

      12288:Ni9AHAwQsNoM4MFaVtPDl0zjNMDzCwCG5eXpyMVB1:k9NWNFMVVDl0zjaDvC4eJ

    Score
    3/10
    behavioral17behavioral18

    • Target

      Pacify/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/NvClothPROFILE_x64.dll

    • Size

      258KB

    • MD5

      487163667776816ea5f70b39ef53d736

    • SHA1

      10c7ae2270aa4e74857e60d171cb270f64f66811

    • SHA256

      0a8520003af9215f5aa32691dd36b56f14c1b4ab8c08d9c8fd4d07fe7c282871

    • SHA512

      7a35bc9a162cb6f9c318fc2f4abebcb288bd9dba02f420cc1d8467af6bde90537bf43f65eefd88dc76ef26a40979b771edda0d42c553e8290012ee607f6c94aa

    • SSDEEP

      6144:2mlhgsbJRZbincUJf6EMr/frVV6W+KKLLEuL+s:2TcUGfhV6W+KK8

    Score
    3/10
    behavioral19behavioral20

    • Target

      Pacify/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/NvCloth_x64.dll

    • Size

      259KB

    • MD5

      4a86b094cb6ff3d8a267977ed5e5b7fe

    • SHA1

      49daa1caa65489fecbef721f2cd76378b2af7e24

    • SHA256

      76b79727ced2ee5bbe7bccf6794e1590fb9072e0f1212db1106772933b6dbb1e

    • SHA512

      c56c5b91955fe557b77eacaa086efb20e8b1ce9f2737ce5cf30553398bfdf505d3f8a19af001835f5f78e69c54c9b4f7e8c354fea0453ed2a87c1988ab4caa32

    • SSDEEP

      3072:B+OF+hSV5uM5zaghwUMX2jU7Ji9XrueP+tsGYahi++od0bt/hHzBpae6yB:Bd+hQ5bYgiUMmjcJarrwsYiHLhbAs

    Score
    3/10
    behavioral21behavioral22

    • Target

      Pacify/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PhysX3CommonPROFILE_x64.dll

    • Size

      1.9MB

    • MD5

      90b38d063189de05e203542527c58fa7

    • SHA1

      237caa4dcc027fd22f938b16be354254e806ff5e

    • SHA256

      7cb70d8edb810a0764d9220d742eadde7f1e684443abbcd628963f5b611c9dc7

    • SHA512

      7f395a3e12a6636d401a529cb5faca2d3b394e6706ee472fc329bf76ef7d3cf569328cc8b7e366879a225d06a675038c464db0d72ddc77440357a7aa62532a6c

    • SSDEEP

      24576:3lGYZIgiF56jgIOq3U/qEOT1h/+F54PKzg+ijsCeQPTIgATmY:3lpZIgi+RGb4Szg+DCV7IgAKY

    Score
    1/10
    behavioral23behavioral24

    • Target

      Pacify/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PhysX3Common_x64.dll

    • Size

      1.5MB

    • MD5

      45c3b1d8d87d10c49af87ba7e8184d6e

    • SHA1

      1333b9e574d333a030d8fbe2b8e3bfddb7aa5e59

    • SHA256

      c69f00fade27fc62a96303e4e12985a4bc476429cce9cf7bc9fd260fbe5f2b38

    • SHA512

      520cfb7c21a2c0332cc70bb8cf31ac6b2b5c445f23251c98e707e7c0e44dc3186b8714a724ddc29bd4714858f8e43d05aff585a8b147e59598a92c89221df572

    • SSDEEP

      24576:rFuawWNgXTmfA/DGpaC65bgbaneU1J8Kh+n1JUfgFL4QQSa:rFuawWe4bo/1SKh+wfyEQQS

    Score
    1/10
    behavioral25behavioral26

    • Target

      Pacify/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PhysX3CookingPROFILE_x64.dll

    • Size

      239KB

    • MD5

      a8240d51dcf91485fdc88ec5f2795c5a

    • SHA1

      dba8eda73f763969340340a7022da65acbf4870b

    • SHA256

      7bf99c80c4072f66321accb2cbf2bf19868ff9d449687b71655a4cf5bdc892ee

    • SHA512

      84e11b64c6d5da229364b2d17f7a7565d96e6e1e6dc4422197262ee565d96f4ba33e20ce27065c95dc97afb736e5df1905058ba43598a0d46e942bc2d80f2715

    • SSDEEP

      3072:AeMbRsWoF4MOZIpO5sUAsufYvf9wLQSZ4sWj0hCIHwNWbR6lYUI6Gc:4RsxGMOZqUAsuQvFwZDU0hD4y6lYUi

    Score
    3/10
    behavioral27behavioral28

    • Target

      Pacify/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PhysX3Cooking_x64.dll

    • Size

      239KB

    • MD5

      2371fef5a51940821cf87705c6256976

    • SHA1

      9a29dd67175448c86c798aaf746384de1e5e21d8

    • SHA256

      5db3d3ca91dd757b21b5fee471e6cdecfdabd197ae9c56341a7e404635b759cc

    • SHA512

      f9da67b5e96a0c9c4922d5c0ee6b46c3ac0653672937983f29f56b269f02d31375401e1bfe9422f98941587df885e926bf430e08b923aa02127b1de71c7a41dd

    • SSDEEP

      6144:tRsxGMOZqUAsuQvFwZDU0hrwb4lQLlKX:7sxn0qUAsfFwZHVwbbs

    Score
    3/10
    behavioral29behavioral30

    • Target

      Pacify/Engine/Binaries/ThirdParty/PhysX3/Win64/VS2015/PhysX3PROFILE_x64.dll

    • Size

      3.0MB

    • MD5

      81e448bf01d893d4358f99003feb3897

    • SHA1

      366e21f52f93dda343c05fa26c35beddf4a33e73

    • SHA256

      0808dbed5acb12cb785a58a8b9c6e84972f5fef322957e753ab666d1436ec6ce

    • SHA512

      56fff9055d1760f64f96b1a0259620adbbe671e18c0e3e931cd639105450981737d9e8a38d51bbdd13e07d0416c7903601fbaa2d4ca771a81caed69899a8a4a3

    • SSDEEP

      49152:A0K4Az1zKDYbTGsFey7mgHHH78orVsO7Ze32NU/zRI:A0YbTGIHHH7rr

    Score
    3/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks