Resubmissions

28/01/2024, 14:03

240128-rcyt4adfdj 3

General

  • Target

    vanta_privat.rar

  • Size

    10.9MB

  • MD5

    de405c41ca13c522b29c6edae9a425d9

  • SHA1

    65bd4c0fcb1ca0a7f891a5731d471efd32f00591

  • SHA256

    7d756a3bf7c274842ff9dc9b419896956d615c256443d1f1b211218e8d7f3d17

  • SHA512

    8879f9c0b48177a1f29dd641a96ad00d18cc498e5c15674b896ded5089ca2f767aa4ecdc5f70424ff78f1deb688213e1f0ce068bf24663f3d2023de0112f32c5

  • SSDEEP

    196608:DplUVinZ5xVim38tdHw5yQOHhauycfoRlr0NjSU2rkgMq9qgzzh7cM0maPLsKl9Z:Dp/5xspHQQQehKISUORRnVnqYmMy

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • vanta_privat.rar
    .rar
  • Selfed.sln
  • Selfed/D3DX/d3dx11.lib
  • Selfed/D3DX/d3dx9.h
  • Selfed/D3DX/d3dx9.lib
  • Selfed/D3DX/d3dx9anim.h
  • Selfed/D3DX/d3dx9core.h
  • Selfed/D3DX/d3dx9effect.h
  • Selfed/D3DX/d3dx9math.h
  • Selfed/D3DX/d3dx9math.inl
  • Selfed/D3DX/d3dx9mesh.h
  • Selfed/D3DX/d3dx9shader.h
  • Selfed/D3DX/d3dx9shape.h
  • Selfed/D3DX/d3dx9tex.h
  • Selfed/D3DX/d3dx9xof.h
  • Selfed/Driver/fortnite-driver.sys
    .sys windows:10 windows x64 arch:x64


    Headers

    Sections

  • Selfed/Makefile.am
  • Selfed/OVERLAY.h
  • Selfed/RCa22384
  • Selfed/SKD.h
  • Selfed/Selfed.rc
  • Selfed/Selfed.vcxproj
    .xml
  • Selfed/Selfed.vcxproj.filters
  • Selfed/Selfed.vcxproj.user
  • Selfed/Selfed1.rc
  • Selfed/aimkey.h
  • Selfed/blowfish.obj
  • Selfed/cache.h
  • Selfed/controlelr.h
  • Selfed/defs.h
  • Selfed/draw.h
  • Selfed/driver.hpp
  • Selfed/esp.hpp
  • Selfed/grdv/binary/bytes.h
  • Selfed/grdv/binary/dropper.h
  • Selfed/grdv/global.h
  • Selfed/grdv/hde/hde64.c
  • Selfed/grdv/hde/hde64.h
  • Selfed/grdv/hde/table64.h
  • Selfed/grdv/utils/ntdll.h
  • Selfed/imgui/GLFW/glfw3.h
  • Selfed/imgui/GLFW/glfw3native.h
  • Selfed/imgui/LICENSE.txt
  • Selfed/imgui/custom.cpp
  • Selfed/imgui/custom.hpp
  • Selfed/imgui/imconfig.h
  • Selfed/imgui/imgui.cpp
  • Selfed/imgui/imgui.h
  • Selfed/imgui/imgui_demo.cpp
  • Selfed/imgui/imgui_draw.cpp
  • Selfed/imgui/imgui_impl_dx9.cpp
  • Selfed/imgui/imgui_impl_dx9.h
  • Selfed/imgui/imgui_impl_win32.cpp
  • Selfed/imgui/imgui_impl_win32.h
  • Selfed/imgui/imgui_internal.h
  • Selfed/imgui/imgui_tables.cpp
  • Selfed/imgui/imgui_tricks.cpp
  • Selfed/imgui/imgui_tricks.hpp
  • Selfed/imgui/imgui_widgets.cpp
    .vbs
  • Selfed/imgui/imstb_rectpack.h
  • Selfed/imgui/imstb_textedit.h
  • Selfed/imgui/imstb_truetype.h
  • Selfed/imgui/vulkan/generate_spv.sh
    .sh linux
  • Selfed/imgui/vulkan/glsl_shader.frag
  • Selfed/imgui/vulkan/glsl_shader.vert
  • Selfed/imports.h
  • Selfed/keygen64.lib
  • Selfed/libcurl.lib
  • Selfed/library_x64.lib
  • Selfed/main.cpp
  • Selfed/main.h
  • Selfed/mouse.hpp
  • Selfed/obsidium64.lib
  • Selfed/offsets.h
  • Selfed/protect/SDK/keygen64.dll
    .dll windows:6 windows x64 arch:x64

    749e98e56844c5a066e829cd37b6dee6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Selfed/protect/SDK/keygen64.h
  • Selfed/protect/SDK/obsidium.h
  • Selfed/protect/SDK/obsidium64.a
  • Selfed/protect/SDK/obsidium64.def
  • Selfed/protect/SDK/obsidium64.dll
    .dll windows:6 windows x64 arch:x64

    d7abc9f08ea9c7772ea0a9736b2816f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Selfed/protect/SDK/obsidium64.h
  • Selfed/protect/SDK/obsidiumlib.obj
  • Selfed/protect/antiDbg.h
  • Selfed/protect/anti_vm.h
  • Selfed/protect/auth.hpp
  • Selfed/protect/blowfish/blowfish.cpp
  • Selfed/protect/blowfish/blowfish.h
  • Selfed/protect/lazy.h
  • Selfed/protect/obfuscator.hpp
  • Selfed/protect/process.h
  • Selfed/protect/skCrypt.h
  • Selfed/protect/xorstr.h
  • Selfed/resource.h
  • Selfed/resource1.h
  • Selfed/settings.h
  • Selfed/shit.h
  • Selfed/spoofer.h
  • Selfed/test menu.h
  • Selfed/x64/Release/Geforce Now.exe.recipe
  • Selfed/x64/Release/GeforceNOW.Build.CppClean.log
  • Selfed/x64/Release/GeforceNOW.exe.recipe
  • Selfed/x64/Release/GeforceNOW.iobj
  • Selfed/x64/Release/GeforceNOW.ipdb
  • Selfed/x64/Release/Selfed.exe.recipe
  • Selfed/x64/Release/Selfed.log
  • Selfed/x64/Release/Selfed.tlog/CL.command.1.tlog
  • Selfed/x64/Release/Selfed.tlog/CL.read.1.tlog
  • Selfed/x64/Release/Selfed.tlog/CL.write.1.tlog
  • Selfed/x64/Release/Selfed.tlog/Cl.items.tlog
  • Selfed/x64/Release/Selfed.tlog/Selfed.lastbuildstate
  • Selfed/x64/Release/Selfed.tlog/link.command.1.tlog
  • Selfed/x64/Release/Selfed.tlog/link.read.1.tlog
  • Selfed/x64/Release/Selfed.tlog/link.write.1.tlog
  • Selfed/x64/Release/Selfed.tlog/rc.command.1.tlog
  • Selfed/x64/Release/Selfed.tlog/rc.read.1.tlog
  • Selfed/x64/Release/Selfed.tlog/rc.write.1.tlog
  • Selfed/x64/Release/Selfed1.res
  • Selfed/x64/Release/blowfish.obj
  • Selfed/x64/Release/custom.obj
  • Selfed/x64/Release/imgui.obj
  • Selfed/x64/Release/imgui_draw.obj
  • Selfed/x64/Release/imgui_impl_dx9.obj
  • Selfed/x64/Release/imgui_impl_win32.obj
  • Selfed/x64/Release/imgui_tables.obj
  • Selfed/x64/Release/imgui_tricks.obj
  • Selfed/x64/Release/imgui_widgets.obj
  • Selfed/x64/Release/main.obj
  • Selfed/x64/Release/vc143.pdb
  • Selfed/xor.hpp
  • x64/Release/GeforceNOW.exe
    .exe windows:6 windows x64 arch:x64

    c1256655a8700e9a8f98edd17e339c0d


    Headers

    Imports

    Sections

  • x64/Release/GeforceNOW.pdb
  • x64/Release/Vanguardmapper.exe
    .exe windows:6 windows x64 arch:x64

    afc1f930b16856804326528e39e42dd5


    Headers

    Imports

    Sections