f982a381d0849c462b831919ac728e9b16de5a39e0a114d6d6bffa548b07efa5

Sharing

Copy URL Twitter E-mail

General

Target
NocturneMenu_Steam_Itch.zip
Size 31.9MB
Sample260812-3lsj8afc99
SHA256 f982a381d0849c462b831919ac728e9b16de5a39e0a114d6d6bffa548b07efa5
MD5 8c4869a1eedcb069f068eaf6b5ecb7b0
SHA1 6421403a4e6b16d912f6757b07cc8b82cf985e8b
SHA512 2fa008150877961c38aba6966a7e6f52ada8d3755164a9dd9a429bd76e26238d36e8727fe0d81356aa40f6f7dbfef50a775b08b97a0705f2741a8f50ad826d1d
SSDEEP 786432:hsNs6EJQHbcDHvhw8xuaIsvg73iEK2/+UTLd8bmhb8lLfsFIXZQnApe6e:3t0A9Pxh9o73djrF6Qqzs86ApeH
TLSH
T1087733D9D4F9793EF833B73880C7C929A4621D4522D05C30B6B7E3A6E6B3DC6061539A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  BepInEx/core/Disarm.dll
- Size 135KB
- SHA256 6b371d0dfaa0631c81f898a567f750babfec5c361d8d2065e69be32e3a08e9c0
- MD5 a7fc6b6b8a1d0eccb20a7b4a83702ec6
- SHA1 41158bf112439786c5887b94a1899f6610fd37c1
- SHA512 649565ba38bee7d2f402df0912930fa9a63d64f0dcce7f8403e44f811373c259c085175653fbc96b8531e3c56e211107525e0ce88a177667033525b9a0bdc0b7
- SSDEEP 3072:FwYnyovJVbnC+lP6rWCBSwSLhUGMz+J68Ekvh:OgvJ51lMBSsGZE
- TLSH
  T12FD32A06BAF97537E8BD0F7604B350160BB679AA6B31E78D708CD0590920BC98C57FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  BepInEx/core/Gee.External.Capstone.dll
- Size 289KB
- SHA256 18f9cfbfd10b479143a46b3e417ccfce4a62d4c2770da9ed12d553a0b326302c
- MD5 e58b4ce725dfda194749a037fd778e5e
- SHA1 adad54dabb32678814f10c28176f55a8cd9a51ea
- SHA512 9e579f5f6ad15b646d7b956223e7d9bfcce5ab110a5f598840a64015077d8eedb5551cfe54bfdf59a65e64bb2da568ccebb635c11013472caac3e29977806d53
- SSDEEP 6144:r2+lRt6xWJtN2d0W1B0oOQxB0C931P7J1PpBZEU9:lt6CK0Mq8RXpsM
- TLSH
  T19A5496303EA45E2FDBEB033852AC4457056795091A196352E716F0AE5CEAB6B32CCFF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  BepInEx/core/Iced.dll
- Size 1.8MB
- SHA256 f058c01321b4cdfc9b9151879e88e59571c8d0ba176fbcf95bc936a8f3d073ed
- MD5 e1e3347e46e1777f93b5b2072bf12ccf
- SHA1 e8b5beca2777afbce30ce9216d228658b08512d4
- SHA512 4dfdc0037c61429369eca863a8ea17861ef69a70a74e3c15f39e1b409b420a884745a16dc60779279e362733da9b219ab4aa1eca56a804461ef8ff644cd47859
- SSDEEP 49152:VjmtTXJbStv4Bvh9qr5Wo0LKA3h1nrlDohXK5r32hQoKbRCU/832JY0XQ6mPzSsg:stTXJbStv4Bvh9qr5Wo0LKA3h1nrlDop
- TLSH
  T1D695B481EBFA8DF7EAB9A371E88913106020ECAE7F17D7676671A4710C477D016530EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  BepInEx/core/SemanticVersioning.dll
- Size 34KB
- SHA256 a5b57607225a0ebde049e93469f49e5b2d07a7d602a03864ce3a72ccf57103a2
- MD5 8098f0fb6f91907f58bd7b8c0d016a28
- SHA1 244aeb2629f59a43b75b16a2160b58e74bccb3ae
- SHA512 21a46aef103caf21592d4beb7fc1a03d41450693a74d875bf89140e67de9b2260e7ccf9eab53f259991b94f7240ed2e157483abbc857bade9b40446ce046329e
- SSDEEP 768:QQMQouH2XchcGltbZcS6XLL/iaV6JYbDmciZmYSYYYYYiPSeE/fz+GgRjja:QQMQv2XchcGlhgXLL/ZV6JYbDmAPSeq3
- TLSH
  T1F7F2D645ABCC5232DBEE0A39A4A2500507FBEA627932FF0F4C8C65C25F677484651BE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  BepInEx/core/StableNameDotNet.dll
- Size 27KB
- SHA256 b83b0b370b1b0c2b441216c47bdf4a0d2d7086dbe8b06ad6e00c9a762c3c3a36
- MD5 8e982083529532a9691846fc3ed4f7e4
- SHA1 afaa92ad830eb71be51e756b8ecc2675244a33b2
- SHA512 2c94d73db3672e4a177a95fe64b4ca66b229574e277d3e47749a04d0d55c2ca63d6187eda601686d55b6980ce1bf06662a7c9ce9234d1caf86f1c13e76911488
- SSDEEP 768:iOHIBAHYCl71RAKVRdx8MvFgr4Qo/niOCSYiiBXh:atCl7bJwMNgBoKOpY7R
- TLSH
  T1AFC26C10BFDC1337C77E4FB96962364407F5AA472E37CA2C7D9A60DA0463A441E21BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  BepInEx/core/WasmDisassembler.dll
- Size 22KB
- SHA256 4aed1f0a3dcb3580a58c74f3f746b5f4bcc2dfaf1769b16d74b052af0992fd05
- MD5 1851586c6cf63c2d6eb4b2d9f67eda73
- SHA1 7afcc135e8e2fd429a31a8481ac89389d5b1529b
- SHA512 86c41d7d75a7b8bc1df26cb4d899746f89b6ac69db42ecd01241205b6ad0f49d05f4048d9cfd6402fe24dd75766e962f5a055c004f7f2aff5e4c49183322a659
- SSDEEP 384:d57oNhcmxArQ1HqPT0gfY2Lw/0HgjQ3sTikB5rfIJct348eGxd:lm+E1HqPTRY2FAjQ8eRcdd
- TLSH
  T152A25C07F7CC3A79D87E367598B222268BAD9B53BD03562B1D9C4067ED23A18C530BD0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  BepInEx/core/dobby.dll
- Size 149KB
- SHA256 dc4effd430eac01b3c6103c38bb94a4890b46f6f6465d4e9d6ecd17fb717a70a
- MD5 f9cd3e129c5cb493cd03a55da7ff13e0
- SHA1 190f0a07bc122306adc54f9795daae52b96db13f
- SHA512 19aa0c42119946536cf639ea91cc429388e478d1c98fafc26d2a7bbc3799e2b7af40c71584e1d2262f88706a349d437b50ba1a04e633dfadc8cd36c1c4d47ff9
- SSDEEP 3072:0o01gJy1+NLtO8MIXuJsiRmpDrAjBJQ0xv7+PQzF+E:0xotO8MIX6vi0jBJQCzF+E
- TLSH
  T132E36B46B450C833D6BF75390532D67D5B2EB663CF6099DB239806BA9F206C18E32B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  BepInEx/plugins/NocturneMenu_v1.1.7.dll
- Size 2.7MB
- SHA256 9c199a31b9c8ada881be8011115c39372676c15a08b7cf82c96dea390a5a77b2
- MD5 3f144d87fb580cce3fa88cd82e70f00e
- SHA1 63a67eb099cfc249372ae811d5949bfd144f423f
- SHA512 d86574f5c9f4f36ac76fead2feadc2720352b4a1c942bcca0d17f6717b16b5a2b5d7e25d89868db54b037a4482d40df5d129d990411450fce9f0de29d0bba323
- SSDEEP 49152:Th3wR/CSIw2KtQCJZ71FWsSz7dMA9F/xEf3eMMOseW3qNqjZ9LG:Th0aY5WJPKa/iMOTW8a6
- TLSH
  T1FCD5F16833FC5E28E1BF1FB1747204464B75B956A9BAE74C0C8AACEC16467D1D900FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  dotnet/Microsoft.Bcl.AsyncInterfaces.dll
- Size 15KB
- SHA256 5705d245072d3eb78400547b32147dbb6e2c8b02ba8bda76729798f5efdeaecb
- MD5 8074b0eeb2d4cf9b1a6b26865bf91aa5
- SHA1 2e438aef830795b2d240cf3160a3353bc6cb0232
- SHA512 05f7d9003427e611f011018844fb8180403cd6ca807e4c5a8beeed03e4cd7fd8babd89dec51a14510eef7c266ba4505b731eb065606d066b061751c89a1d772a
- SSDEEP 192:mzuPwZ40ytyqjaWeb/WIWOL8/pCuPHnhWgN7aAWDr/MqFCfvXqnajJ72h/j:7G40ywqjaWeb/Wg/uPHRN7yM9Xl172hb
- TLSH
  T10C722A91C7A84203EDB57FB05679D5463C3CB6D26C31922D1189E29A1CE7BC1EB31B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  dotnet/Microsoft.CSharp.dll
- Size 950KB
- SHA256 1078d8a532ec33016a7cd7954fe4e9ee16bab20d5387fa262d2bc8c2d3904a17
- MD5 5af03d5f1c555851d8d165db06623a2f
- SHA1 9b2c8fb226b4098976102768aa382fe7c047f243
- SHA512 06ab0b3df4ec72857853272e47886d0c204777a034efbe1c12d3ec2c82c5891beb80fa5929967d3388ba8c491506d68f4f789398a1e2f0dc02e2bd71cc59fe7c
- SSDEEP 24576:2efuwy067Ex4L12O992KgvA/deDOad+Vu9yHF1KBB9tPxd:xmw967BL2v2Cd+Vu9yHTsd
- TLSH
  T187257D12A6C88EA7F7CC06769AABEA5092FDB41E133147CF4524FD9510633C69DF2293
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  dotnet/Microsoft.Extensions.DependencyInjection.Abstractions.dll
- Size 42KB
- SHA256 9ccd830351aa28bc683d4f8d1cefd9e724161f972d25bfb64eee5bf55c48c5e3
- MD5 d6cfda4e1c948aeb3e5d57376334375f
- SHA1 cb8c35306afd15358104ecfe70e724ad9c753e6f
- SHA512 93a7571c4d186243d78641630b8997fdb69d411df307d95c86aed556102369a98b9a13ca5c7ca8d593244cf0b0f039bc37d330b86194b07b2c9f0bcec3c06b2e
- SSDEEP 768:o8+cxuPn//hpz2XCkCkCdvAb4b4qox06OoV0F8l0HCTpw0wo0emDMtj:/+cxuPn/bvvE0Q0HCNfBsDMZ
- TLSH
  T170133C4577FC8366D5BE5AB065F191149D3BFAC72802E7062948D0AC1CA7FCC2A62FB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  dotnet/Microsoft.Extensions.DependencyInjection.dll
- Size 79KB
- SHA256 2aa8182b5356a8cc5c35fc3641a87e814857d8d9be399ac78f260343754d09e0
- MD5 5db27bdd3d6a9a225b88b12293382f95
- SHA1 eb7d6d2250bf2509b89166bc22c07423ac9c2d91
- SHA512 4ed559768d1f1a405203f1e2d6a72dddc4c7b485461979a14d22566236e169f7e2652e9b3d85f0205c296bc4d705a30519a5f292aa6eda26137b7f2923660b3d
- SSDEEP 1536:iNLmvi666OjIX0h9zMPvHBWCaRweUG4DynjEZnBaMH:Q66fjLb8vH0CiUG4DyneBaQ
- TLSH
  T182834C25A7FC4722CAEF6AB4543595110F7EF9C67003FB481EC8A0691A97FC14B623B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  dotnet/System.Buffers.dll
- Size 15KB
- SHA256 62ddc807aa5610d5a300c5207c9842a9fe30f7db4edac60cf6e2336225b8607d
- MD5 8059fb9445319ba4ae893fde78cfc42a
- SHA1 a73e4040d4e4b2c5e69d14620baff788dd1f3733
- SHA512 5daad99ca1c4377a1b6ea4be1a46527bdae349bc42287ef6acd5827c952d976450572b7c980f7901f6a663d497ee711022ddb3b07b590bea79f839e7ae663f25
- SSDEEP 384:xriWN2WbsBlHRN748+r2ll8R9zrriseGw:jYj48blQ9zaGw
- TLSH
  T1FE625BA687A85207EDB76E7096F1DA433C7C67D2AC11926E15C9F9451CA33C8DB3023E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  dotnet/System.Reflection.dll
- Size 16KB
- SHA256 484e13b10629a520d8454c5ba890896da25842de135779552c566ce5d25151e1
- MD5 98ea68d8c83746422c4b98b51bd6aab6
- SHA1 236dd3eca8bcb3b463007b27cfbe12ef73c404cc
- SHA512 fd183225625304c7cd66c9f5116ebc5b8366d60119542ec306cfe974bf82806d28bffa2ae9884d7f7bd7223932230f3e71f2a397e1d1da9a8ddde6bd0e6c6db9
- SSDEEP 192:0SegMZK+wxxYZ9WYCW13Wo0A2j9seHnhWgN7akWf8q21eX01k9z3AsrisnCCvCeR:0jFQivWYCWTsBlHRN75l8R9zrrisnt5
- TLSH
  T10F725CD2CBA84203EDAB6E7091B7D6833CBD67C61861912E14C9E5491C97788DB2133F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  dotnet/System.Runtime.InteropServices.dll
- Size 48KB
- SHA256 a7a324585129d5a1ffa676b28b5bc46b045df27752b0a6c03bfdeefbf0798207
- MD5 9b3ec7c0eebe95b953b35b3532ceb5c8
- SHA1 fad059913cd522dc45fed3b9d8b02a92c72a1626
- SHA512 ddb686f8e66c01839723b25dd59594b387e1a1373df7a70bd1d345211911969de33605d56083f775ecc8e8ae9e77e3706d1040cfd83807c08cc62a2fcc3aef47
- SSDEEP 768:RHo3fKQCqWN4p8k61rvZqhwFLQFMjJihjhjOQ69z51:RHoiQO4bGqhwFsFMjJihhuzb
- TLSH
  T125235A12AF5C5327EEA607345672E6820EB5B6C51363C7DF8464DA8A54DBBC843B03B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  dotnet/System.Runtime.Intrinsics.dll
- Size 16KB
- SHA256 cfd219df617ee4807210e8be783d609c5489a2f5fd3d09ac946ea519da5c7f16
- MD5 1e18a8c4487babeae2c18836ae1275f7
- SHA1 3463d7969ecafe79f61b8dd3feb1a0fc9272d5ee
- SHA512 3a524dac9f3a10a8dbf3f7323758c59a7aa477c6b0cf5a6442d9eb9377728377ff304d699f89cd32c53952217a9787d305a78499c301c8635085743c6b326385
- SSDEEP 192:f9FErJPlZDnWQLW1fWo0A2j9seHnhWgN7awWCAyhG2ZUnQJeX01k9z3AzXtojJYu:I1ttWQLWbsBlHRN7pG2teR9zmXtSV
- TLSH
  T178724C42DF98814BEDA31FB05AB6D9437CBCABC7686091660A8DF6090C63794DB30739
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32