6556b6a2144b5a1cbabd24208baf889e164017bf6563446b8f732e4502ff92f4

Sharing

Copy URL Twitter E-mail

General

Target
Scarlet.Skips-SteamRIP.com.rar
Size 1023.3MB
Sample260912-sbdcfadd76
SHA256 6556b6a2144b5a1cbabd24208baf889e164017bf6563446b8f732e4502ff92f4
MD5 4d70ae2970b1b919ac31fe1db84af073
SHA1 31fd1cbdc606c65c26a253c1b7fa12e56c6c994b
SHA512 fa9a08fb7721e68299e38b8e74fc43c1d9ba7c4d265db1a152317d27f156d12efa67fb775c075a037e98c4b68294af3649161bac50a34e9a6ff28e2df176048e
SSDEEP 25165824:PNWwDzzbxHQQ8hL3ev6I21AoYKkfFRWrA8FjjeP:kwDOQ8Q6I21BYTvWc8djg
TLSH
T140B9336B39FD4A6FE5BEB0D68B4F2354018CF5192B445E03E3E2749BC9AF5B82C85118
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  Scarlet Skips/Engine/Binaries/ThirdParty/DbgHelp/dbghelp.dll
- Size 2.1MB
- SHA256 c1bed91901a4c3f24ad32f09a160d6c92f23543a7030812b2a2df6618a420669
- MD5 2d88dcd29e36a8b2af19f7d2edea96d8
- SHA1 e5ea1d89efd320cc1116d0e5e798aa09a046e9ab
- SHA512 f613c7a9cef8d7d0f9818ebc41b6ed03d5664a2cc9c1016398316edff53d13c90a62d44eab6629dd10e2ad26b2017852f77acd8daf31df3ede99eeda539f30f3
- SSDEEP 49152:jwocwVH+umtSiRFXIrZ4mTQHuEnmDdE51p:jhcAH0r+OFrmD01p
- TLSH
  T14AA58C4792EC40A8D57EE13CD657421BD7B238450330A7DF52A887AE6F23BE51ABE341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Scarlet Skips/Engine/Binaries/ThirdParty/MsQuic/v220/win64/msquic.dll
- Size 2.4MB
- SHA256 b52ad46f1f06c2bec79e5f2ea8ae1b02be21c6173b011cbffe0fac0ee0117b85
- MD5 42bc39a65a0a4adae8e1939e7fb017c2
- SHA1 9715b45bda5ae8b7e3a2eb97f4b2766c23717683
- SHA512 14c5230b2f692c3856f935ef671012710ac75be31aea201e6a7f15d7210ce3b1849acdaec44b581da2e6da1a2683bb22ec1585964e0b92d5d2f40e34eccac040
- SSDEEP 49152:QVwASO0Gtlq1IU6idfp1s7NJt0fegH1yZWxWT4ttWDGyPj8VVp:S+FC0144b+81
- TLSH
  T19EC59E17A7A811E8D877C238C9638137E7B1B81513B0ABDF16A4C6B90F67BD1673A740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2 behavioral3
- Target
  Scarlet Skips/Engine/Binaries/ThirdParty/NVIDIA/NVaftermath/Win64/GFSDK_Aftermath_Lib.x64.dll
- Size 5.2MB
- SHA256 1368db77821b4172db00afc410e8a45647193dc8e24fede9db5714a69a58b5c1
- MD5 391520775e20fc413267badac1f8778e
- SHA1 cd4cafe96957f0f9154495728d9f28bac483c251
- SHA512 56bd341ae32a0219f67d1802b92a7a7bcb8114cc9c727eff8b609726bc9d13d4cf7d9d30d944859b76a7385fdb76b077fc1fec2223c4d1d851772f8e7fddfd3a
- SSDEEP 49152:a51CObepcfBU/Rqt6Dg/Auobysa3amwQdvvT+FUnEui9a46W3BXlC133Zt9FSb4e:egid4tc9pYNIOjgOX
- TLSH
  T106467C7A335841DDC47AE178DA431E0BC335BC454371AAEB03A29A6A5F277E51F3BA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4 behavioral5
- Target
  Scarlet Skips/Engine/Binaries/ThirdParty/Ogg/Win64/VS2015/libogg_64.dll
- Size 58KB
- SHA256 8351b1c052e985e27f3e30fdce5971770b25b58880cd5cdfebde488d93590252
- MD5 d9625395db20ee8cf4b08379a172bbd3
- SHA1 02bd55c5ac372b8eddd9e16f9b402dbc583e00b0
- SHA512 b0f3504d54d92c1fb8e10ef357b212f3ee562b17c63a80449723b0b94d8e85c1b79ea55a62ccd5333a229b8900c251bb5fa94f4e931edd3332379d6fd5703c3e
- SSDEEP 384:GVKN7KRked7VWjLmPnUunFqphqaNQL2PnQftfKNRvrzAcojOYPumOIYirsUPIy81:pkSQyQUuFq19HAhjXumDYira5AL2
- TLSH
  T1EB437C174714686FE83B543D98E5D326E976B850936157CF1248C34E0F23AC93E7A3B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6 behavioral7
- Target
  Scarlet Skips/Engine/Binaries/ThirdParty/Steamworks/Steamv157/Win64/steam_api64.dll
- Size 10.7MB
- SHA256 1bc8731a3a9e9d1a68ee14a815c2525be713141c8e6abb7d40d9ac1dabc79fc9
- MD5 553c4d5c47253e13dc1e2c9df839cce0
- SHA1 989de27468efc2be0ad26832701cfe803be0f99f
- SHA512 d5c58ed10fa587fc4d5ad5f926c8833c525ea27b627f81f8f191dcf6ace73a66ab422bcea2771a9a6dc0e4ca7eb03c404147c1d3258863a7afbaf9e716dc05d0
- SSDEEP 98304:HhHTZ4Xod+k6uLfQZnt5oxxrSYlqdWMtojwNkZAPg7PdB:HhHTctOqdHojwNkZQUz
- TLSH
  T1FCB6F717E7BA01E4D5BAD1789563623FFDB13495833097DB9A805A0B1B32BE4E93E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  Scarlet Skips/Engine/Binaries/ThirdParty/Steamworks/Steamv157/Win64/steam_api64_o.dll
- Size 298KB
- SHA256 dc4b5d8595e74192d10e06e8019492f67c51ce260254f0a965c95b0fcfd4ac17
- MD5 87be60de8e29ec503b2b6aff4961e0b3
- SHA1 1ecdc537704fc69d89f1c6dd1fb6172c3b9eccbe
- SHA512 6025d1fd14aa57ae6d9ea6f49293ada1a0a85b83f2aeb6247fcecc1c0f24d05909cf51a364a9edf6b33a4a61bafba67359a011fc6d7f117ae82f332239c07b3a
- SSDEEP 3072:FjTqkh2mB9mkVi635gRaeaZqk4YJDf32uB+rJFC9R+5z65lhTbCz+hnv91vFAyNt:1b9mZOB3Zx4YUuoaRRFAymC2CPzrOw
- TLSH
  T17A545A7AA2710CF4D076C13A88565E0FF670744B27619EFF2A6093368E676C21E3B791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral11
- Target
  Scarlet Skips/Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbis_64.dll
- Size 1.6MB
- SHA256 f14d789b969797f29ae56bc211da74bc7681cc979d45ac55eae2587839743180
- MD5 c2f1d151806cce1872432cb3ba0f4c01
- SHA1 98ecc3c957d2c5211ad57a53e2d1b1c16da65020
- SHA512 dbc8552a74bd20ffd9c88c3cd822d4f9e7232598de313f91514c21bfcaa53f3542d56377aea5943b9fe568db554c2e265d6688412ff3881860492787e6937ff0
- SSDEEP 6144:UbbUbUwlPxtVNA0ueMSMMYGUXoz0A1VoqxRCv8H:yulPcDe2XNS2U
- TLSH
  T10C851F0759928B34C1BC50B588DB557853322C4DAE800F9E7BDCE67434D3678BEA2BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12 behavioral13
- Target
  Scarlet Skips/Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbisfile_64.dll
- Size 47KB
- SHA256 2d97292f614d1f029063603e65de66ba651c3aa2a30fd418aefc402bec1d788b
- MD5 c0f99758e03916927f5352dc59b4f29b
- SHA1 1d857fa1da3b446c4b359832c1baaf9bbf2e972b
- SHA512 f13ee3007e0818c85500bb762051d63deeeb67ee4177a8c59f41b774babca12a501c0c8e89b65f781fd8e3f176c33279d2e1c0905dc92f8039a50ffc4cf82d00
- SSDEEP 384:/e2rmsvpGwK9QaXYBZ9b/kwmVkSA3/pTNYTdk1aLPHXrgP7gpw5WOOBp8FbIYir2:9nv89iBswdSAQS7kWW/BekYirqk5AL3
- TLSH
  T1D5237CD796F124DECCA7C938969B1B2BFEB27006536066DF535481291F22BC2337A325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14 behavioral15
- Target
  Scarlet Skips/Engine/Binaries/ThirdParty/Windows/XAudio2_9/x64/xaudio2_9redist.dll
- Size 838KB
- SHA256 d6260924816479b32c495731ef3d55d4186c5bc3c6cee6a1211aeebcbcbf88de
- MD5 889c94855b7eae4110823f5a2e70f6d7
- SHA1 16ab31361970576a8dff69b03ea8b5301160e23f
- SHA512 e805a745f88c42248ec1db877295c365533fd7ce3bd1b165b1c087ca87f8877bca48bd9bb821020560f7c398cd92ebfd9c1a2bc97f06b049a25b5d35c33bad80
- SSDEEP 24576:q+6PHmQBNmTqtEcl+4n0wcktNvSRbESezI:qhBI9InQMNvM1
- TLSH
  T11B058C53F6E549F5D16B51359167BB1BF672B40027254EFB02A086283FF37C01ABA3A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16 behavioral17
- Target
  Scarlet Skips/Engine/Plugins/NNE/NNERuntimeORT/Binaries/ThirdParty/Onnxruntime/Win64/onnxruntime.dll
- Size 14.0MB
- SHA256 c8dda75c930538a27283437b7890f5349bf86cdc8d6ffdafd1eb7a8ef4c8ae17
- MD5 e16e95667a57ab12613720762e1fe62b
- SHA1 c94f961a9299422f856daa36d54f4074c267f77c
- SHA512 918c5f8fb0409ad42de993ec8de1635533b78b71a35923195beb712de9493af5cd71a1656cab742eeff3edab76fdba00c662091024a90b73648c6f512e7e969d
- SSDEEP 98304:VFoSlq0Rw2sadqTyYijSpYkrji69ROrjHpI:VFocRwvDGjMVrjX90pI
- TLSH
  T19FE66C1666A902ECD1BFD17C9A4B5A03F771744943715BEB02F041AA2F6B7E09E3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18 behavioral19
- Target
  Scarlet Skips/ScarletSkips/Binaries/Win64/D3D12/x64/D3D12Core.dll
- Size 3.2MB
- SHA256 244c72d69a06fe082aa59844b841f7605fb272e2394bc1fc998bdfc8d7921f6f
- MD5 95d10c7ee53e1381be84895cf89a79b5
- SHA1 eb0f69c151926c30e166b994f29ceddb55c6eec8
- SHA512 5485e8dbd3c0215d3b7234fc302b1052a01f2d157a5359345ec7538b86ea7e57e7a4b00dfa5c11f3131c9a5baa00e923cb10d2d41b46cbcf31e6000ac4d3601c
- SSDEEP 49152:RPb+ZBjjuIx5VrUAxYyZwzplBzG+RuSPbTiIqUSX3Su6MZXs34Xsmj:WxUzji6aj
- TLSH
  T141F57E03F69940F5D5AAD0B8C91B860BD6B178B4877293CB25A0935F2F277E18D7A331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral20 behavioral21
- Target
  Scarlet Skips/ScarletSkips/Binaries/Win64/D3D12/x64/d3d12SDKLayers.dll
- Size 5.5MB
- SHA256 27436b5288f557fb5bcbb1cc4b5b84a14dc17af2edb0ed2550ddb098f6f65485
- MD5 63c1c8b1cc5d4e016fac39ec5372f949
- SHA1 30300aa3d84b6fcfe02c7a45c375283ce6a87834
- SHA512 e227b811901ca8f043be1ebcdb12ff5f40f4cb578a13f1326b6ef39369e8e5bec2bfd3500daa3b5d09705b8cfc2d7279b52270d7d54711e8ecac6aea1a3e3855
- SSDEEP 49152:KOz1yBwltxWnvjtlJcPbb1n2CBINS8RAMHeh0LYkIydNOUpWAu8nEwrU+6ha85Z2:KINxnbsUnMbYkNO0juZUsnNinljXN
- TLSH
  T107467C1763E802B5D4BAD278CA97860BE3F2B824537193CF06A147991F67BF05A3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22 behavioral23
- Target
  Scarlet Skips/ScarletSkips/Binaries/Win64/DML/x64/DirectML.dll
- Size 17.7MB
- SHA256 18918565cfefff21fb14362b21d32f52a1108a3a1cda564ce104f496e9a06588
- MD5 150a55f678a0eb8a155aa22133ec0bb6
- SHA1 e66729099ab058c6566142eb3e456bd2605a803f
- SHA512 2047328d6f318b4aeb72604005b1657de6829101b6dcb9437006702929d29f94e28e71bffb32510c9cf922d48bdbe551a38cadf1eebce0c771c6a0ae9f62ae61
- SSDEEP 196608:u6Kj5yxjROGq0Ytzn7OBdzIkRnyrQAH5+sM3TKV:oU2GMtz7oZIkByrQo5QTA
- TLSH
  T1ED17D01A6F6415A6C17BD23D9A530A43E3B6748A43706AE706F80D311F97BE05B3F386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral24 behavioral25
- Target
  Scarlet Skips/ScarletSkips/Binaries/Win64/ScarletSkips-Win64-Shipping.exe
- Size 145.0MB
- SHA256 efaf544cd9d9f4133eac3ead166d8da08d70b8ce77fc64a14dc50fd47da4a0e9
- MD5 c7edeb50093e6c7588e0a115d2c9fee6
- SHA1 6791366f52ef7caf1036f897d6f2f71faac94eaf
- SHA512 09acda63aca88fd51f962367a5942a0320ff7266df30776d1f305bd92de10fb0992c55adf3789cb6ab04112cda01bdbf1e6278f834936931c7cabb693796aa84
- SSDEEP 1572864:BET9lOQ/fyDOewZqLTthB+cFct7cvUcP:W9naOIdFmUz
- TLSH
  T14D788D06B3E159E8F1BAC175CE3A550AEAB13875032197DB05A049899F3FFE0597FB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral26 behavioral27
- Target
  Scarlet Skips/ScarletSkips/Binaries/Win64/tbb12.dll
- Size 323KB
- SHA256 5fdf9e1d91ce4b03cb6742d551538010ce995b430f4c28b2a1d664fabb46ad89
- MD5 869ba26e6388b4cb66da1473828c5096
- SHA1 19c31e5dd2f147867a2676fa473e63f24c8d2066
- SHA512 a3d698101b70c4fd94cf354ad98927ba0f8c8538f99385cc8193431a525a1bbf59eecb57f328b4a0d6ba5c28f8bba73220b239c38678ad12f230f088e5c5a50f
- SSDEEP 3072:aIE7Jyz964oXz+D0xgiQLNSlsn+GGO4i5VAJYYPHxF8+uvHnbkSMFCWW0nOm:atJyzXoGlNR+GGO4BJB5F8fvHnbpKz
- TLSH
  T18664170ABA980496D91A927CCA734A59E3F27C541391C3CF2260437EEF7BFD6663D214
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral28 behavioral29
- Target
  Scarlet Skips/ScarletSkips/Binaries/Win64/tbbmalloc.dll
- Size 114KB
- SHA256 0bd90f4831d625613ca5f5279cce892413e6542590f8a8d95b7c46ac04e10a2a
- MD5 d40e730cf11c383d4eb452c11bb1f273
- SHA1 50b0e3cec7bd22f89a16c8f60fc478ac728b789c
- SHA512 c5a4c49b2e6ef87e5e70c4b7e2cfab4bedcf3579c9f18f1d50221bc1b0ad78709b688b0a80faabe9e1e1a545cfdf5dd223a304847e7a4ecba6d396782998e563
- SSDEEP 3072:cLLJbu9Q0zdf2rjFxmF2MtVuNodWJrcnq:cLLJbYQ4df2rhxy2DNodWkq
- TLSH
  T171B34A4BB6AC084AD52F4378AA934959C3BAF491175087CF137843E82F67BE62E7D701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral30 behavioral31

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31