bfc05e4b799bbeda9a0ddb2d6c144e3bc805120c928433cb37f3145f5efca335

Sharing

Copy URL Twitter E-mail

General

Target
Shift.At.Midnight.v1.0.3.0729.2021-OFME.rar
Size 397.8MB
Sample260805-hxtlfacj9w
SHA256 bfc05e4b799bbeda9a0ddb2d6c144e3bc805120c928433cb37f3145f5efca335
MD5 a21ba634739fdedb5850eb54eddc2b9d
SHA1 aafe0151369a297906341a88ca87892afb26a7f9
SHA512 2d8d6c3a1b5305ad015031362b684d5ff56d5a946eacb7de94619710e64dc8e0f3d23c6792ce9063408a09e3c1348d4ba0bc2361129335548ff5e8edc58526db
SSDEEP 6291456:Ga8IVhsevUkYHjf8T7I61KfqYTXD10hpSC1ogyRgBq7/kE+W/eiLNjzlNYdkDIfM:0evUfjX61KxZ/gx47tH2iLdTkjfwMa
TLSH
T1151933F301A40F2BCBADC9B23659209355D00E4418EFB5FD6238B57C4E9296AF7279E4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  Shift At Midnight/D3D12/D3D12Core.dll
- Size 5.6MB
- SHA256 31f364f2b3aa1753e7ba9ff912d0721c8f424be5fa14503efddafbb30c635d3b
- MD5 f2ba8763a1ef9857c4d4b7cab5631edb
- SHA1 296b7e537d6e986a2e4021834fad3334867acf3b
- SHA512 44f272560e1dbc282e70cb07c87e95ca3a7ef41839ebd20194fc411c67626e9c54e6f4b261aed3670dd21c6829b56ebdd0d28319207834a236fc462f97d4ce91
- SSDEEP 49152:k6PExwEh3ElnqHtuNfXlOunv5YcoqqjThYiwQF0Q29DgUOkpiq0SpTqJQEnUR034:1GYNfC50LRgg1x
- TLSH
  T13B565B47B2E942D8F1B7D17D8FA74A0AF6717421632097DF12110B9A6E13BE04B7B3A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Shift At Midnight/GameAssembly.dll
- Size 65.9MB
- SHA256 d7209d756930bcb2d9bc2e763a74de3b86ec5d94910796f4dc610308650a70ab
- MD5 335a0fbb00015d94324c6d8acf585f52
- SHA1 666fcbc03891f4a01eb08c512df5881a08af371f
- SHA512 a9197dfda5ebfbf7d26d1766e0aa1784a69684a4b1c3d793e9464a7bc829c59c67af6ca6d0740f6601378bb72f02c76db1f8a2cabb2523f1ee3eb440beefa3f5
- SSDEEP 786432:KMYMstVkHxi2Olp6j+Q4W5NKnDqoo0a6:KMVO3lp6j+L/
- TLSH
  T198E7394ABB758458C0AEE1389A23149FDBB13C445F246BDB24904B9D1F737D8A87BB70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Shift At Midnight/OnlineFix.url
- Size 46B
- SHA256 3cb526cccccc54af4c006fff00d1f48f830d08cdd4a2f21213856065666ef38e
- MD5 59bf167dc52a52f6e45f418f8c73ffa1
- SHA1 fa006950a6a971e89d4a1c23070d458a30463999
- SHA512 00005820f0418d4a3b802de4a7055475c88d79c2ee3ebfa580b7ae66a12c6966e5b092a02dc0f40db0fd3b821ea28d4aec14d7d404ead4ea88dc54a1815ffe26
- MD5 SHA1 SHA512
Score

1^/10
behavioral5 behavioral6
- Target
  Shift At Midnight/OnlineFix64.dll
- Size 13.2MB
- SHA256 27a1c596c4b1de1e6672cb7e7fba2ba3d3124999493ff82a504beb6f6145e88f
- MD5 00813d08c8a0cdf3420bd38fd72c80e8
- SHA1 992119b11b5067959776b18f609c594c6c888bb9
- SHA512 a842617f0fc320fa90661a7b7a7809252a5b935ce4249a79f3fe520565a02db6c55ec80b9eb581aac1b4b29ad5954adf6f29bcf1d3624ddd86a5b8b03ad929bc
- SSDEEP 196608:OrATka029FenZW3Q8YrVNnZv9/F91mWsz0kg4kAHh3Zkghk0XV4YPNOLOOKj:KeLIJ5d9/FjxsGTiJ1hk+HPNTj
- TLSH
  T1D3D6129925D4937CC4408138F5451AF9F0D97C888CFD8826FFC749127AB1DA9C8BABB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  Shift At Midnight/ShiftAtMidnight.exe
- Size 656KB
- SHA256 037fcf50fe2b6468cc23297058610f189e13459e68121ec4b7c5bb7b44f3bb37
- MD5 4545fd90658f3c9aca3560451ea60b53
- SHA1 3814b5ec4a786682676a4c5e48af4d51d1ad5311
- SHA512 fce0d991f6c2f35c747fc3e7b4b5c6dbad540938b7e6d9b14763da906b686aa1b53f037dd68f3cc5d54ba03a07a1a9922856cb5f62f6cb02d46bc4156b51a9d6
- SSDEEP 12288:52NCDdJr3d4dmG3a5JXFiEtJyn2TiQiF/mEjin:vjQmGq5dYc/Tij/m
- TLSH
  T1CDE408481751998BC202373C49A0FB3992785EE47D3EDB7A89A12FC73E64F492F815D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/AudioIn.dll
- Size 142KB
- SHA256 50f8407d6cd5625d2a8811885a1917989c92186e8106b1dad8e39cc4f7f9a62e
- MD5 c761d504977ccb55c1b98b3d171c3620
- SHA1 88c98ff7224b267bfa7a3b06f9186ee2c78dde7c
- SHA512 9ff3e033e1505f1e9926e254296fb7ca82c298b6cf3e307408a09ba6b2d884abc8646e2ae64ddea1c5ffe1b329fc2d2f9a5998fcaeef464bacf1d12ae7d909a4
- SSDEEP 3072:PYjZNWehiHilHJfqE+9Qcm58uqiWFfdVGLMwVF:igHeJSEqQcmjZxF
- TLSH
  T11DE37C5773A540BBE17B8278C963494AE77274111B31DB9F03A443BA2F673919E3EB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/Microsoft.Xbox.Services.GDK.C.Thunks.dll
- Size 1.9MB
- SHA256 e86c2fe4090517f0ff0dad47f859dc1ecd6db0177840a2674587a9c6da93673c
- MD5 5dad3d0bf070d5f1b21c4f0011d9243e
- SHA1 248a1c9b7f1e63ebaa8d754b92acaf9e354710aa
- SHA512 f4b38b4c8ca89de5cc74b8092b2158d466e3f8bed651e6d4e298bfb2773157886e83e9745eb49e9549deae2e6a289e434b148048de18feffe63b87087b626e51
- SSDEEP 24576:8u8Qi1W1tIWkiRmWPqyjnZcUWcQHq+qNeILhWa320LBZDJeoPowyuz18b+lw4MO0:LGQFkiM/IyUEbILhWKXlowyOleOP2rb
- TLSH
  T118954A96326800F4C0F9C1B9DE5B8807EBB134464374EBDB45E0DA9F1E6BBE49A7D601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/XCurl.dll
- Size 194KB
- SHA256 cecde38e28c879f10da5dd970208f636de383e244e9039cfc68f4bc122a8dea0
- MD5 89def0ca5a57e0c496b72db627861a83
- SHA1 6159b6f780d5fd1e379f3e1719920e855892a04d
- SHA512 9524965733f3ec1c2b4d1a68862cd5f5019d69eaf3305b848b5157ce18e26f3ba90a1e948bdb3eab65fde1a40527284be1695c1121b07806ba861bdf85662c75
- SSDEEP 3072:d8Wm7IMO11wyzl3qttsJnw7yzt20z4hcrxfRY7h86pjWJl8K:WW1Rzl3qttkUy97+xjWJ
- TLSH
  T111147C2666A410B5C1F78274C9A54617FFF2B1892B3053CF06B097691F533A1FA3A72D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/XGameRuntime.Thunks.dll
- Size 142KB
- SHA256 664710ec2b07b5482cf3a43d01399c182f81c42b095d00b9b09ec9854f1652c9
- MD5 d7af416f8dff8d20e46471a61709a94e
- SHA1 78522431a065bc076ba7c1527242f3d941e59986
- SHA512 473058634eb23dc1dea3fd31467a391ed1f39275e10e25b697de7efa712d2d2ffc34e39395f87ed6311deec81a11dd983a13e03d8b62ab6214756ee0631b64c0
- SSDEEP 3072:BV0gT0aw0+e+q0PvGPjatVmgCkhCpj4A99:Pp0aw0+e+q034jaP+kcpjZ
- TLSH
  T14DE373EAAFF280B9C6022639D8A48A99F6C5F5900F2107D78757640E0E37FD05F3A761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/libHttpClient.GDK.dll
- Size 329KB
- SHA256 6fbac3794d211333dbe88bdb4be21546a0d4e2be282ad9ff3bfc90c2a6ef98da
- MD5 6948cc048a44d8831e3f479a328f01b9
- SHA1 be36ce161f840dac8505051c6128e7a3f5d637f1
- SHA512 87c3af1b02485ead1d0db01b79e0dce0c83be9978ff98533ab3b7be64d7246071918ae2d8f4ecabf5d126e6fb8d7360ed69085c310cea2831787b58f515efef5
- SSDEEP 6144:f2T8f2b4mVuJ3W4VQxVSEJZm6QU0zGvuEeq+UJ+t9WbjC4ZAl:fP28/3xqVSEeU0zGvuEJ+qh4
- TLSH
  T1AC744B26BB581872D5B3C278CDD28286F7F374970B7056C707A09A3E6E736E05B39246
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/lib_burst_generated.dll
- Size 921KB
- SHA256 07fc06acdb69908dccab8fc312a4bc92bd2ad160a3fe8cbbb57c5f60d431dbcb
- MD5 4a0059991fc0b06ce4c12e3f2c7b63a7
- SHA1 7a01cb425ed69d3ef1958578d0a335614d4c9793
- SHA512 722bb56f453a5bef6d3a6bea1371af3bad80ac46820c5fba73eda764147fb650d47bda6f187223ca442643a94905e588f785997cb364d09987a8cf86eedbfffc
- SSDEEP 24576:ZVrvfJREpRjSPpekSRkJqWR3S67IKe5pAOUJyV:ZVMRe+62
- TLSH
  T115158E7821DA78EDC41EC470025ABB57B122384A57491DF350E180F93ED5AD72FB9A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/nanosockets.dll
- Size 94KB
- SHA256 037985bd36c9b6984e8680e9f508491a7056f010bdb7207e32f07aa149eaaf00
- MD5 7047677e0dab71cec6de78493696cb28
- SHA1 a8b7a64d9dfb89dc9559e509a7c7e8e270ff9049
- SHA512 2cd99297daf8acc5cb36c7b6c3961d7158356b7a1a919d3c3095b08e7c60a06bec94e35ff0b8b74f46f00645864cb69f69b319353cddaf55c347ea44f5066e92
- SSDEEP 1536:HLfhWKZWrrThSGio2rGH92Mc6AbFoJmHEsWXqDd09dlYcljQ:HLfhWKSPh7iraAMc6UowH+YMtl
- TLSH
  T1A493495BB2E940BFE036563888630F19E776F81617258B6F03A4065E1F273D19D3AFA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/opus_egpv.dll
- Size 430KB
- SHA256 4f74f4a21512f4cc13bee08c043cf98e0a4c92c02d265283058a19f7c70d7ee7
- MD5 8b45c7ec84adc6a071bf5837f1038cf5
- SHA1 6bf74519b96558dabaaa219a83e7ebb97b59ba8d
- SHA512 f960fb5ac6cb50e1dc17f9e2553c4c6fe305c7eaeb83f3d4a742854bbeefb029f2b8c9e4e813fc47eaa6f5a928ac612c48d893841aa3d0c7dc4f6f19fb2ba403
- SSDEEP 6144:YdcYMYMqHpMAAv8ukEacI/fbPiKvF3Yo5CSiHxqLeLtMdA8jotLvznklujtyFoAg:WFVJ3df7wP58AVy9GvIbYoFo
- TLSH
  T19494AF46F6E198E8E17B5078A1AAB34BF6303809032441FB47E489656F76BC09DFF752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/steam_api64.dll
- Size 312KB
- SHA256 670d654aa3255c5061cf0236a1cdbb2f5076cbd5ae44f613b6f4921558e83e2d
- MD5 b3caec4d455160acf21a318073c40dc7
- SHA1 fcb09f9da2172d58fbf4aa57bdd30d607ccbf237
- SHA512 bd3417c5c5c022f2b3f729283d77a335200fab8a7c439eee00f9d298608f804a3f6698049d30351d8a5dbfa3e728518691472fc78b91b8785ca5d1a5c52c6142
- SSDEEP 6144:JfgdBtTW65Q6tW31ghwXRTRylO2CXuPu+SQ:JodBtW6pte1gsbys2Cza
- TLSH
  T199645B3962750CF4E077C13A88565E0BFA79344B23219EEF236062769E537C21EBB791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  Shift At Midnight/ShiftAtMidnight_Data/Plugins/x86_64/webrtc-audio.dll
- Size 811KB
- SHA256 589ce036d3e426597a785b9632dc08c1299e4d4455eb1d498787418ccb78687d
- MD5 8f2df82b4285d5824dd9a46570b9e5da
- SHA1 ca96ebf7c5a6cda3693ca565b8b09cf9aeb4b7c4
- SHA512 0bad1649cab5b4bb5abd6ad667e2631e2e37d15f091de6541e7ea842f3a9347058c4f5e9368a7b3b5e47bdb7ffa9b093059cb70ffa35262b656fe646a5138a5a
- SSDEEP 12288:0G3eyUE5galX3cvt2VUJb0kmKniTk13IR6bEqVG2oQhf:Dey33lXSCOPDqk13C6RG2D
- TLSH
  T190058E06B2B905F8D03B90399667B917FB727049032099EB07E04A697F67BE15EBF311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  Shift At Midnight/SteamOverlay64.dll
- Size 114KB
- SHA256 f784b4b85b627c7ea541bd2a90c9fc6e9736a0731707c31265aa86fe684dc2df
- MD5 0a5429b888c75f6525e1100e32dd2b69
- SHA1 8ae224580aa0838a7b1570c79d4d8f27a1b46d19
- SHA512 5f77ac9619ccb5baebabb2e406ce265148ad18c6e1162c7d4c3a5656f38abedf90f756a829da856312689a738a3258382f37a279843bf7db0c14ac953c6992ef
- SSDEEP 1536:h1iaPnCtV4+1/IGiaA7bSMhP3rOy843NxnpWJtRsWkd09dl38s6BtcBRXh4:h1iaPn5+uGi/7bpxaX43Ni3aMLJB1h
- TLSH
  T163B34A5B73E500BBE0768239C8A71A15D376B8110760DBEF03A0466A1F277E19D3EF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  Shift At Midnight/UnityCrashHandler64.exe
- Size 1.5MB
- SHA256 f64143ac6cb1bd16f45b33151a4ca9e93e0fd1d6a42ec506ab047422fab7b4d1
- MD5 1072774bfab62e98504644016a81b5af
- SHA1 efb962157688b54e89c33f5d0b1b7ea4a91aeec5
- SHA512 1e93622a6465b90ad2d53cd11ead3e1c9a5525ca7b3c7ace3df4d6b425a6e20d8798a754f46b1435d71251babe73f40f4c26a086e359c5e39c675f4a16448371
- SSDEEP 24576:WwDi8sDK/wsgez1vdQo5wuUw9PTfoxz/y/N9w/X/:Wwm3BO1lQOwg
- TLSH
  T11A75282A2E641DCCD426843ECB83869FD2B1BC1A1F714BD717A17BA76E320D01A7B751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32