9214fef6ce22d2bed233d3cb3805324ec9cbcba958e81864c5afef1eb7a1b4d8

Analysis

max time kernel
363s
max time network
367s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
24/08/2023, 11:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Skyrant V2 Valorant Crack [By LOLSHAN].exe
Size

3.0MB
MD5

0d11a233511197f65c30061d56ce250b
SHA1

8f2c2f9ac38dbc98634f9ff753ae0103d4ddece7
SHA256

8d9e248e884c0bb48674af0b0a18c96f258d287584ebf306dd043e8c46021aae
SHA512

3f1514e5fb698cac0722edb51962a5f0d336365e70fa2488e8363a2c6979ea053759aff3331059b4746fb33d4572858e1764b2ecf3c9563aabbbe365feba1544
SSDEEP

98304:1GK6yEGrypyuGwylGxyLCdmDDo4MnBpgl:1G0EGmMuGjlGkWdeMbI

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
1860	Skyrant V2 Valorant Crack [By LOLSHAN].exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1484	1860	WerFault.exe	27

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1860 wrote to memory of 1484	1860	Skyrant V2 Valorant Crack [By LOLSHAN].exe	30
PID 1860 wrote to memory of 1484	1860	Skyrant V2 Valorant Crack [By LOLSHAN].exe	30
PID 1860 wrote to memory of 1484	1860	Skyrant V2 Valorant Crack [By LOLSHAN].exe	30

C:\Users\Admin\AppData\Local\Temp\Skyrant V2 Valorant Crack [By LOLSHAN].exe
"C:\Users\Admin\AppData\Local\Temp\Skyrant V2 Valorant Crack [By LOLSHAN].exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1860
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1860 -s 676
  2⤵
  - Program crash
  PID:1484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\32a4a32f-b10a-42fc-a699-939a32e55fe5\SiticoneDotNetRT64.dll

Filesize
142KB

MD5
9c43f77cb7cff27cb47ed67babe3eda5

SHA1
b0400cf68249369d21de86bd26bb84ccffd47c43

SHA256
f25b9288fe370dcfcb4823fb4e44ab88c7f5fce6e137d0dba389a3dba07d621e

SHA512
cde6fb6cf8db6f9746e69e6c10214e60b3646700d70b49668a2a792e309714dd2d4c5a5241977a833a95fcde8318abcc89eb9968a5039a0b75726bbfa27125a7

Download Submit
\Users\Admin\AppData\Local\Temp\32a4a32f-b10a-42fc-a699-939a32e55fe5\SiticoneDotNetRT64.dll

Filesize
142KB

MD5
9c43f77cb7cff27cb47ed67babe3eda5

SHA1
b0400cf68249369d21de86bd26bb84ccffd47c43

SHA256
f25b9288fe370dcfcb4823fb4e44ab88c7f5fce6e137d0dba389a3dba07d621e

SHA512
cde6fb6cf8db6f9746e69e6c10214e60b3646700d70b49668a2a792e309714dd2d4c5a5241977a833a95fcde8318abcc89eb9968a5039a0b75726bbfa27125a7

Download Submit
memory/1860-35-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-41-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-2-0x000000001B380000-0x000000001B400000-memory.dmp

Filesize
512KB

Download
memory/1860-10-0x000007FEF6C00000-0x000007FEF6C27000-memory.dmp

Filesize
156KB

Download
memory/1860-11-0x000007FEF40E0000-0x000007FEF420C000-memory.dmp

Filesize
1.2MB

Download
memory/1860-1-0x000007FEF57A0000-0x000007FEF618C000-memory.dmp

Filesize
9.9MB

Download
memory/1860-12-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-13-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-15-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-17-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-19-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-21-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-23-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-25-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-27-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-29-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-31-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-33-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-0-0x00000000010F0000-0x0000000001402000-memory.dmp

Filesize
3.1MB

Download
memory/1860-37-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-3-0x000000001B8E0000-0x000000001BA88000-memory.dmp

Filesize
1.7MB

Download
memory/1860-43-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-39-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-45-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-47-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-51-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-49-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-53-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-55-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-61-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-59-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-65-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-63-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-57-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-67-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-73-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-71-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-69-0x000000001B8E0000-0x000000001BA84000-memory.dmp

Filesize
1.6MB

Download
memory/1860-476-0x000007FEF57A0000-0x000007FEF618C000-memory.dmp

Filesize
9.9MB

Download
memory/1860-532-0x000000001B380000-0x000000001B400000-memory.dmp

Filesize
512KB

Download
memory/1860-595-0x000007FEF6C00000-0x000007FEF6C27000-memory.dmp

Filesize
156KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads