Overview
overview
6Static
static
3OnlineFix.url
windows10-2004-x64
6OnlineFix.url
windows11-ltsc_2024-x64
6OnlineFix64.dll
windows10-2004-x64
1OnlineFix64.dll
windows11-ltsc_2024-x64
1ShiftAtMid...64.dll
windows10-2004-x64
1ShiftAtMid...64.dll
windows11-ltsc_2024-x64
1SteamOverlay64.dll
windows10-2004-x64
1SteamOverlay64.dll
windows11-ltsc_2024-x64
1winmm.dll
windows10-2004-x64
1winmm.dll
windows11-ltsc_2024-x64
1General
- Target ShiftAtMidnight_Fix_Repair_Steam_Generic.rar
- Size 11.1MB
- Sample260724-fd4aesselh
- SHA256 04db199e1958c5a653abdfd95dd110e454ff376823df7cba2bcf6e7c830a0ab9
- MD5 6945e2ed99f43be7cda54de07dd9d7a5
- SHA1 bd5ec78eae29f9a1824fd4304cb371341108f4c6
- SHA512 cd508292514a6429ac3d70c91792fed6b9e192c4b41fab7da9d1080d3600acbadf71c3ee9b256ae6bc2a1eff7d48f8d03f136258564eb4213da4bf93d5a9f7f9
- SSDEEP 196608:Y3xLbPGd/KeTrzPpuCyls7Xug437ordXskC9oBgXfzsHRA5BuKLm+6TaRvq3:YxopTrzx5ykXYkrwW+Op++84
- TLSH T1CEC633B0868642153048A8CB3F5ED23932D6693F9F832FC1E69DD75E65E3094F8A07C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
OnlineFix.url
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
OnlineFix.url
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
OnlineFix64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
OnlineFix64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
ShiftAtMidnight_Data/Plugins/x86_64/steam_api64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
ShiftAtMidnight_Data/Plugins/x86_64/steam_api64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
SteamOverlay64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
SteamOverlay64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
winmm.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
winmm.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target OnlineFix.url
- Size 46B
- SHA256 3cb526cccccc54af4c006fff00d1f48f830d08cdd4a2f21213856065666ef38e
- MD5 59bf167dc52a52f6e45f418f8c73ffa1
- SHA1 fa006950a6a971e89d4a1c23070d458a30463999
- SHA512 00005820f0418d4a3b802de4a7055475c88d79c2ee3ebfa580b7ae66a12c6966e5b092a02dc0f40db0fd3b821ea28d4aec14d7d404ead4ea88dc54a1815ffe26
- MD5 SHA1 SHA512
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target OnlineFix64.dll
- Size 13.2MB
- SHA256 27a1c596c4b1de1e6672cb7e7fba2ba3d3124999493ff82a504beb6f6145e88f
- MD5 00813d08c8a0cdf3420bd38fd72c80e8
- SHA1 992119b11b5067959776b18f609c594c6c888bb9
- SHA512 a842617f0fc320fa90661a7b7a7809252a5b935ce4249a79f3fe520565a02db6c55ec80b9eb581aac1b4b29ad5954adf6f29bcf1d3624ddd86a5b8b03ad929bc
- SSDEEP 196608:OrATka029FenZW3Q8YrVNnZv9/F91mWsz0kg4kAHh3Zkghk0XV4YPNOLOOKj:KeLIJ5d9/FjxsGTiJ1hk+HPNTj
- TLSH T1D3D6129925D4937CC4408138F5451AF9F0D97C888CFD8826FFC749127AB1DA9C8BABB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target ShiftAtMidnight_Data/Plugins/x86_64/steam_api64.dll
- Size 312KB
- SHA256 670d654aa3255c5061cf0236a1cdbb2f5076cbd5ae44f613b6f4921558e83e2d
- MD5 b3caec4d455160acf21a318073c40dc7
- SHA1 fcb09f9da2172d58fbf4aa57bdd30d607ccbf237
- SHA512 bd3417c5c5c022f2b3f729283d77a335200fab8a7c439eee00f9d298608f804a3f6698049d30351d8a5dbfa3e728518691472fc78b91b8785ca5d1a5c52c6142
- SSDEEP 6144:JfgdBtTW65Q6tW31ghwXRTRylO2CXuPu+SQ:JodBtW6pte1gsbys2Cza
- TLSH T199645B3962750CF4E077C13A88565E0BFA79344B23219EEF236062769E537C21EBB791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target SteamOverlay64.dll
- Size 114KB
- SHA256 f784b4b85b627c7ea541bd2a90c9fc6e9736a0731707c31265aa86fe684dc2df
- MD5 0a5429b888c75f6525e1100e32dd2b69
- SHA1 8ae224580aa0838a7b1570c79d4d8f27a1b46d19
- SHA512 5f77ac9619ccb5baebabb2e406ce265148ad18c6e1162c7d4c3a5656f38abedf90f756a829da856312689a738a3258382f37a279843bf7db0c14ac953c6992ef
- SSDEEP 1536:h1iaPnCtV4+1/IGiaA7bSMhP3rOy843NxnpWJtRsWkd09dl38s6BtcBRXh4:h1iaPn5+uGi/7bpxaX43Ni3aMLJB1h
- TLSH T163B34A5B73E500BBE0768239C8A71A15D376B8110760DBEF03A0466A1F277E19D3EF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target winmm.dll
- Size 490KB
- SHA256 063a8d5e57cd760a8eafb3573146cc97e18180412a5a0efc23614e23dc1a2568
- MD5 3fb1fae80a788ffd42b7f7047bc0903d
- SHA1 079be776a6618e43865bb4c033e119fcb7ae3306
- SHA512 08f994f0f4e8f268e77d29556eef805cb3405862fa9986c7e7dd15d5257e2d7366a4e77e07d6a4ba693fc2bc53be0f13eb36a5ee36b8e1dd2d05a8c394f14221
- SSDEEP 6144:zz01cAnrjsEtjiT5BZhK6H8jEY6tbNUvvJgVGs3YUlXULmyU1vwjmvy:vecAnrJjefK6c5vqVGGNXULmJvmk
- TLSH T178B48F19A2A842B9E567E178C9430A07E7B1BC464761D7CF03E09BBB2F277E0563E351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10