a8b82e580a070bac577800ec2b94cb8206ce5622f5b82566b369b263c3774d85

Sharing

Copy URL Twitter E-mail

General

Target
Shift-At-Midnight-SteamRIP.com.rar
Size 376.3MB
Sample260802-v49mfsdm2v
SHA256 a8b82e580a070bac577800ec2b94cb8206ce5622f5b82566b369b263c3774d85
MD5 a7935cf90624672d4c899bb74add685e
SHA1 2483beeede995104d3266c99ed4125c7a7e5c280
SHA512 695b668e3811bc7c7914f43c317796854b0e166f4bd5ac50ecd26fd7f31b374240bff6b8f64723ffa0c7cabdf9e5e9b8c0f95840c09a5c6a9dd8826d94dd32b7
SSDEEP 6291456:PSUZaOvzp69OWV92M86/7FpCCPWRTBJ8lAQXkg90Ao7/g76nR2w8q1V7af2Q5QVI:PRD09OiYM86KTl4h0Go7/gEznIVKVacq
TLSH
T1A419333382F49A5CCDD1257A8A6FCB3AFFE0816A51D784DFB8145C41FA08F965E36182
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  STEAMRIP » Free Pre-installed Steam Games.url
- Size 219B
- SHA256 4572f3812daf7bcd347d1a36834c5a9fec1f530093adf688a6ecd9e6092cbf76
- MD5 bb3af69a2e7704bc210886920ff7681f
- SHA1 42fa4a09d62cce1c0d70a63e0816135fd6b410e3
- SHA512 4f86d06f06859ed87d5f5353de9971c118477c956a8e0e0019b275f6eb035b2841c7cb959c9f4823a599ca7e73f6a0ed320207d917e8f4ab2a9b20e732551839
- TLSH
  T119D0A9BA0B58900AD321C81AE030BC08E44E75568CDED0B932C4CA8A4D96481C8A6BA8
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Shift At Midnight/D3D12/D3D12Core.dll
- Size 5.6MB
- SHA256 31f364f2b3aa1753e7ba9ff912d0721c8f424be5fa14503efddafbb30c635d3b
- MD5 f2ba8763a1ef9857c4d4b7cab5631edb
- SHA1 296b7e537d6e986a2e4021834fad3334867acf3b
- SHA512 44f272560e1dbc282e70cb07c87e95ca3a7ef41839ebd20194fc411c67626e9c54e6f4b261aed3670dd21c6829b56ebdd0d28319207834a236fc462f97d4ce91
- SSDEEP 49152:k6PExwEh3ElnqHtuNfXlOunv5YcoqqjThYiwQF0Q29DgUOkpiq0SpTqJQEnUR034:1GYNfC50LRgg1x
- TLSH
  T13B565B47B2E942D8F1B7D17D8FA74A0AF6717421632097DF12110B9A6E13BE04B7B3A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Shift At Midnight/GameAssembly.dll
- Size 65.5MB
- SHA256 7c4ee6a88b2d8fc4a647aebb8fa5aa197888b51b9d2dbe25b73cb039dba37f42
- MD5 37fc825d9f5a82bfcf376863dc801783
- SHA1 59854b0f431410046984376f7ad8c43f50f3b3cd
- SHA512 1047cea6e43c9a0174d0e721cc5a34fcd103757c7969bd8d5494881bd522dc023d6a658a4a52f10272355a0cdaa487d69f0eafebedf9813492d468a36ac7575e
- SSDEEP 393216:3wEYIXWwCe48jprLD9/DjNadaG70/STfsdPppgDPtBK14EhGki5ehC3vPhPGb32C:TVWypgDPYwPGbKVMySxsCWjOkF
- TLSH
  T1BDE7174ABB758448C4AEE1389A23149FDBB13C445F2467CB24904B9E5F737D8A87BB70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  Shift At Midnight/OnlineFix.url
- Size 46B
- SHA256 3cb526cccccc54af4c006fff00d1f48f830d08cdd4a2f21213856065666ef38e
- MD5 59bf167dc52a52f6e45f418f8c73ffa1
- SHA1 fa006950a6a971e89d4a1c23070d458a30463999
- SHA512 00005820f0418d4a3b802de4a7055475c88d79c2ee3ebfa580b7ae66a12c6966e5b092a02dc0f40db0fd3b821ea28d4aec14d7d404ead4ea88dc54a1815ffe26
- MD5 SHA1 SHA512
Score

1^/10
behavioral7 behavioral8
- Target
  Shift At Midnight/OnlineFix64.dll
- Size 13.2MB
- SHA256 27a1c596c4b1de1e6672cb7e7fba2ba3d3124999493ff82a504beb6f6145e88f
- MD5 00813d08c8a0cdf3420bd38fd72c80e8
- SHA1 992119b11b5067959776b18f609c594c6c888bb9
- SHA512 a842617f0fc320fa90661a7b7a7809252a5b935ce4249a79f3fe520565a02db6c55ec80b9eb581aac1b4b29ad5954adf6f29bcf1d3624ddd86a5b8b03ad929bc
- SSDEEP 196608:OrATka029FenZW3Q8YrVNnZv9/F91mWsz0kg4kAHh3Zkghk0XV4YPNOLOOKj:KeLIJ5d9/FjxsGTiJ1hk+HPNTj
- TLSH
  T1D3D6129925D4937CC4408138F5451AF9F0D97C888CFD8826FFC749127AB1DA9C8BABB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Shift At Midnight/ShiftAtMidnight.exe
- Size 656KB
- SHA256 037fcf50fe2b6468cc23297058610f189e13459e68121ec4b7c5bb7b44f3bb37
- MD5 4545fd90658f3c9aca3560451ea60b53
- SHA1 3814b5ec4a786682676a4c5e48af4d51d1ad5311
- SHA512 fce0d991f6c2f35c747fc3e7b4b5c6dbad540938b7e6d9b14763da906b686aa1b53f037dd68f3cc5d54ba03a07a1a9922856cb5f62f6cb02d46bc4156b51a9d6
- SSDEEP 12288:52NCDdJr3d4dmG3a5JXFiEtJyn2TiQiF/mEjin:vjQmGq5dYc/Tij/m
- TLSH
  T1CDE408481751998BC202373C49A0FB3992785EE47D3EDB7A89A12FC73E64F492F815D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/AudioIn.dll
- Size 142KB
- SHA256 50f8407d6cd5625d2a8811885a1917989c92186e8106b1dad8e39cc4f7f9a62e
- MD5 c761d504977ccb55c1b98b3d171c3620
- SHA1 88c98ff7224b267bfa7a3b06f9186ee2c78dde7c
- SHA512 9ff3e033e1505f1e9926e254296fb7ca82c298b6cf3e307408a09ba6b2d884abc8646e2ae64ddea1c5ffe1b329fc2d2f9a5998fcaeef464bacf1d12ae7d909a4
- SSDEEP 3072:PYjZNWehiHilHJfqE+9Qcm58uqiWFfdVGLMwVF:igHeJSEqQcmjZxF
- TLSH
  T11DE37C5773A540BBE17B8278C963494AE77274111B31DB9F03A443BA2F673919E3EB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/Microsoft.Xbox.Services.GDK.C.Thunks.dll
- Size 1.9MB
- SHA256 e86c2fe4090517f0ff0dad47f859dc1ecd6db0177840a2674587a9c6da93673c
- MD5 5dad3d0bf070d5f1b21c4f0011d9243e
- SHA1 248a1c9b7f1e63ebaa8d754b92acaf9e354710aa
- SHA512 f4b38b4c8ca89de5cc74b8092b2158d466e3f8bed651e6d4e298bfb2773157886e83e9745eb49e9549deae2e6a289e434b148048de18feffe63b87087b626e51
- SSDEEP 24576:8u8Qi1W1tIWkiRmWPqyjnZcUWcQHq+qNeILhWa320LBZDJeoPowyuz18b+lw4MO0:LGQFkiM/IyUEbILhWKXlowyOleOP2rb
- TLSH
  T118954A96326800F4C0F9C1B9DE5B8807EBB134464374EBDB45E0DA9F1E6BBE49A7D601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/XCurl.dll
- Size 194KB
- SHA256 cecde38e28c879f10da5dd970208f636de383e244e9039cfc68f4bc122a8dea0
- MD5 89def0ca5a57e0c496b72db627861a83
- SHA1 6159b6f780d5fd1e379f3e1719920e855892a04d
- SHA512 9524965733f3ec1c2b4d1a68862cd5f5019d69eaf3305b848b5157ce18e26f3ba90a1e948bdb3eab65fde1a40527284be1695c1121b07806ba861bdf85662c75
- SSDEEP 3072:d8Wm7IMO11wyzl3qttsJnw7yzt20z4hcrxfRY7h86pjWJl8K:WW1Rzl3qttkUy97+xjWJ
- TLSH
  T111147C2666A410B5C1F78274C9A54617FFF2B1892B3053CF06B097691F533A1FA3A72D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/XGameRuntime.Thunks.dll
- Size 142KB
- SHA256 664710ec2b07b5482cf3a43d01399c182f81c42b095d00b9b09ec9854f1652c9
- MD5 d7af416f8dff8d20e46471a61709a94e
- SHA1 78522431a065bc076ba7c1527242f3d941e59986
- SHA512 473058634eb23dc1dea3fd31467a391ed1f39275e10e25b697de7efa712d2d2ffc34e39395f87ed6311deec81a11dd983a13e03d8b62ab6214756ee0631b64c0
- SSDEEP 3072:BV0gT0aw0+e+q0PvGPjatVmgCkhCpj4A99:Pp0aw0+e+q034jaP+kcpjZ
- TLSH
  T14DE373EAAFF280B9C6022639D8A48A99F6C5F5900F2107D78757640E0E37FD05F3A761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/libHttpClient.GDK.dll
- Size 329KB
- SHA256 6fbac3794d211333dbe88bdb4be21546a0d4e2be282ad9ff3bfc90c2a6ef98da
- MD5 6948cc048a44d8831e3f479a328f01b9
- SHA1 be36ce161f840dac8505051c6128e7a3f5d637f1
- SHA512 87c3af1b02485ead1d0db01b79e0dce0c83be9978ff98533ab3b7be64d7246071918ae2d8f4ecabf5d126e6fb8d7360ed69085c310cea2831787b58f515efef5
- SSDEEP 6144:f2T8f2b4mVuJ3W4VQxVSEJZm6QU0zGvuEeq+UJ+t9WbjC4ZAl:fP28/3xqVSEeU0zGvuEJ+qh4
- TLSH
  T1AC744B26BB581872D5B3C278CDD28286F7F374970B7056C707A09A3E6E736E05B39246
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/lib_burst_generated.dll
- Size 921KB
- SHA256 d9bb0f2befc3426e8c6149e921324ef96169f7726861e8717a34414d4eb85822
- MD5 35c52083bca7fd59d2906efa1c295b5b
- SHA1 ed2bb3a39744d97bb0f074972b7f049b49e56924
- SHA512 9e25cdb94693f0f82ee7244046f26b4f58657ca51d55d68273276b5ae0269322c0144b6fc96a932cbbcf37a81a8de9db79bff789acbc27e304d46326f2eb3095
- SSDEEP 24576:wWbIV+32bZa5YM5MJonOcQR3S67IKe5pAOUBn:wXbZKY30Oce
- TLSH
  T1D0158E7822DA78EDC41EC470025ABB57B122384A57491DF350E180F93ED5AD72FB9A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/nanosockets.dll
- Size 94KB
- SHA256 037985bd36c9b6984e8680e9f508491a7056f010bdb7207e32f07aa149eaaf00
- MD5 7047677e0dab71cec6de78493696cb28
- SHA1 a8b7a64d9dfb89dc9559e509a7c7e8e270ff9049
- SHA512 2cd99297daf8acc5cb36c7b6c3961d7158356b7a1a919d3c3095b08e7c60a06bec94e35ff0b8b74f46f00645864cb69f69b319353cddaf55c347ea44f5066e92
- SSDEEP 1536:HLfhWKZWrrThSGio2rGH92Mc6AbFoJmHEsWXqDd09dlYcljQ:HLfhWKSPh7iraAMc6UowH+YMtl
- TLSH
  T1A493495BB2E940BFE036563888630F19E776F81617258B6F03A4065E1F273D19D3AFA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/opus_egpv.dll
- Size 430KB
- SHA256 4f74f4a21512f4cc13bee08c043cf98e0a4c92c02d265283058a19f7c70d7ee7
- MD5 8b45c7ec84adc6a071bf5837f1038cf5
- SHA1 6bf74519b96558dabaaa219a83e7ebb97b59ba8d
- SHA512 f960fb5ac6cb50e1dc17f9e2553c4c6fe305c7eaeb83f3d4a742854bbeefb029f2b8c9e4e813fc47eaa6f5a928ac612c48d893841aa3d0c7dc4f6f19fb2ba403
- SSDEEP 6144:YdcYMYMqHpMAAv8ukEacI/fbPiKvF3Yo5CSiHxqLeLtMdA8jotLvznklujtyFoAg:WFVJ3df7wP58AVy9GvIbYoFo
- TLSH
  T19494AF46F6E198E8E17B5078A1AAB34BF6303809032441FB47E489656F76BC09DFF752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/steam_api64.dll
- Size 312KB
- SHA256 670d654aa3255c5061cf0236a1cdbb2f5076cbd5ae44f613b6f4921558e83e2d
- MD5 b3caec4d455160acf21a318073c40dc7
- SHA1 fcb09f9da2172d58fbf4aa57bdd30d607ccbf237
- SHA512 bd3417c5c5c022f2b3f729283d77a335200fab8a7c439eee00f9d298608f804a3f6698049d30351d8a5dbfa3e728518691472fc78b91b8785ca5d1a5c52c6142
- SSDEEP 6144:JfgdBtTW65Q6tW31ghwXRTRylO2CXuPu+SQ:JodBtW6pte1gsbys2Cza
- TLSH
  T199645B3962750CF4E077C13A88565E0BFA79344B23219EEF236062769E537C21EBB791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/webrtc-audio.dll
- Size 811KB
- SHA256 589ce036d3e426597a785b9632dc08c1299e4d4455eb1d498787418ccb78687d
- MD5 8f2df82b4285d5824dd9a46570b9e5da
- SHA1 ca96ebf7c5a6cda3693ca565b8b09cf9aeb4b7c4
- SHA512 0bad1649cab5b4bb5abd6ad667e2631e2e37d15f091de6541e7ea842f3a9347058c4f5e9368a7b3b5e47bdb7ffa9b093059cb70ffa35262b656fe646a5138a5a
- SSDEEP 12288:0G3eyUE5galX3cvt2VUJb0kmKniTk13IR6bEqVG2oQhf:Dey33lXSCOPDqk13C6RG2D
- TLSH
  T190058E06B2B905F8D03B90399667B917FB727049032099EB07E04A697F67BE15EBF311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Shift At Midnight/SteamOverlay64.dll
- Size 114KB
- SHA256 f784b4b85b627c7ea541bd2a90c9fc6e9736a0731707c31265aa86fe684dc2df
- MD5 0a5429b888c75f6525e1100e32dd2b69
- SHA1 8ae224580aa0838a7b1570c79d4d8f27a1b46d19
- SHA512 5f77ac9619ccb5baebabb2e406ce265148ad18c6e1162c7d4c3a5656f38abedf90f756a829da856312689a738a3258382f37a279843bf7db0c14ac953c6992ef
- SSDEEP 1536:h1iaPnCtV4+1/IGiaA7bSMhP3rOy843NxnpWJtRsWkd09dl38s6BtcBRXh4:h1iaPn5+uGi/7bpxaX43Ni3aMLJB1h
- TLSH
  T163B34A5B73E500BBE0768239C8A71A15D376B8110760DBEF03A0466A1F277E19D3EF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32