49b6d67f90aa66ed8f757f77b9c88ddeae10d6f04e56320973a058bd125ea621

Resubmissions

08/08/2024, 03:56

240808-ehkhfashla 3

Sharing

Copy URL

Twitter E-mail

General

Target

Valorant Root TBR12.045.rar
Size

76.0MB
Sample

240808-ehkhfashla
MD5

25c11c92540229ecd3eb2b898ac3467a
SHA1

c850915f6a26a20fa777d95251648a2e5399c3e8
SHA256

49b6d67f90aa66ed8f757f77b9c88ddeae10d6f04e56320973a058bd125ea621
SHA512

6196c68dc3474a4ee72357ec40f60527840eb9ebe4d0de951471df9a3859f064eb3de26302a76b1d86094503d4eba5de60c76b54c49d9631ce32b26d5962d0d0
SSDEEP

1572864:IDY9lLq0GhkjOuw132FxRX+4VeZyFTWMd5oLvuri8enaOyxaQ/N+HUhmyDCEfO16:iY2PhkjomFL48T/5auri8IVQ/MHdyjOo

Score

3^/10

discovery pyinstaller

Malware Config

Targets

- Target
  
  Valorant Root TBR12.045/Boot/C_IS2022.DLL
- Size
  
  40KB
- MD5
  
  e85bc843346c4f990e948c847152d6ab
- SHA1
  
  4301457af178b224b534323ae36b17f5938d5d93
- SHA256
  
  ddb1de29b7d323edc53553e28194e92bd9e5b1a8841585bb5038ba771b60294e
- SHA512
  
  4d5ec4e88c232b4d19b406c27e6935cd502a1cd4796a34ef7a6235f71e1c784f907553e74cccb1565691cb2ff187d5c521dae1f88b8810366e03f1bee37df7fe
- SSDEEP
  
  192:KPyPqsT2UHeX97iXF57Ny54+TTVUfI4jrPgA6m4PpdEe65r2ZAZHS4Eycb8HWjtW:GhKeXFiv7c5ZH2vrI7CESHS5b8HWjtW
Score

1^/10
behavioral1
- Target
  
  Valorant Root TBR12.045/Boot/C_ISCII.DLL
- Size
  
  32KB
- MD5
  
  e6119f53946ceb70a9a4a971e02e3683
- SHA1
  
  2cbed696a1a4e095dfcdf61f5728cb85eca63e8e
- SHA256
  
  b176aea4086a2fb7b899c8459e211e7523587264c0b5c2abfc2117afbb292176
- SHA512
  
  f172e3f5fe9d7394fe04b3e253fec7dc604fe52910711921e0a2508daeaa2f2f3047c2fae38e218afd9421ec108f113728bed197aff37e520cc828b7515c1109
- SSDEEP
  
  192:LGlP7R0yZjJNssX01+84ffD7Mv2Cva10+EpcfeGb/+i+WSkW1:KP7R0yH+1+L7310mfeGZ+WSkW1
Score

1^/10
behavioral2
- Target
  
  Valorant Root TBR12.045/Boot/c_GSM7.DLL
- Size
  
  32KB
- MD5
  
  0b3713faabdaba3d582ec59535763bf9
- SHA1
  
  15c0c2fcba84124b3213eab6159424f13d6b4c1b
- SHA256
  
  6451ab5f05b50daf1284e5320820e01db52cffbc9ad8b9a53d35a81872ae22a0
- SHA512
  
  6fba7c6fe7cb551fb5107d95a60636e13fc984dc074a29cea8a6043ea1697508ceea754780a9b1ffbdf9b44eb0c7474ca666a425a8079b2a01c07d7ec1bdbab3
- SSDEEP
  
  384:QVo4MeojA6N6HiKXxQwNVSKQFCt0eVWmzWJv:mEA6NAXxJNYKQFCtRz
Score

1^/10
behavioral3
- Target
  
  Valorant Root TBR12.045/Boot/cabapi.dll
- Size
  
  120KB
- MD5
  
  16bb85283731b892a1019fe24501e194
- SHA1
  
  dabaa2ef17c539ee8e00fc819d9ae45e209b42e6
- SHA256
  
  db602f695084250832168238b6e458a214082d6f7151e4dfa090f35d8e68faa4
- SHA512
  
  178d9a2f290488d8b8a0260f3a7f13879753fc28f099fda2e45e009dc5b7c3eb2287b930ee1d403c3f142bc34920b8e798e47e4a93075c7c6ea597f28cf94418
- SSDEEP
  
  3072:ep0Hc7ijzr7wdo3NrK5oSt7zLfMF0aqMK2v:egcC7wdo3NWBHaqM
Score

1^/10
behavioral4
- Target
  
  Valorant Root TBR12.045/Config/Tools/Combat/winrm.cmd
- Size
  
  33B
- MD5
  
  f80eef72983614db418a0c1fae21ebc1
- SHA1
  
  1e741199065307b6fe1f820f20e68ea99877a008
- SHA256
  
  8323d52f2ff69fedf02ab6238e9e3319d091e47a13afd17ed0300aad0c0a881e
- SHA512
  
  28e7a256e36fb550f7b49d427162bd18db84ea6c8dbec637f8d50aec086a5522bbb2c5338b669fa80a5d82ba8094d3b815c97fa6fc9513774bba88c1b2aa94f2
Score

1^/10
behavioral5 behavioral6
- Target
  
  Valorant Root TBR12.045/Config/Tools/Fix/winrm.cmd
- Size
  
  33B
- MD5
  
  f80eef72983614db418a0c1fae21ebc1
- SHA1
  
  1e741199065307b6fe1f820f20e68ea99877a008
- SHA256
  
  8323d52f2ff69fedf02ab6238e9e3319d091e47a13afd17ed0300aad0c0a881e
- SHA512
  
  28e7a256e36fb550f7b49d427162bd18db84ea6c8dbec637f8d50aec086a5522bbb2c5338b669fa80a5d82ba8094d3b815c97fa6fc9513774bba88c1b2aa94f2
Score

1^/10
behavioral7 behavioral8
- Target
  
  Valorant Root TBR12.045/Config/Tools/Replace/winrm.cmd
- Size
  
  33B
- MD5
  
  f80eef72983614db418a0c1fae21ebc1
- SHA1
  
  1e741199065307b6fe1f820f20e68ea99877a008
- SHA256
  
  8323d52f2ff69fedf02ab6238e9e3319d091e47a13afd17ed0300aad0c0a881e
- SHA512
  
  28e7a256e36fb550f7b49d427162bd18db84ea6c8dbec637f8d50aec086a5522bbb2c5338b669fa80a5d82ba8094d3b815c97fa6fc9513774bba88c1b2aa94f2
Score

1^/10
behavioral10 behavioral9
- Target
  
  Valorant Root TBR12.045/Config/Tools/Sources/winrm.cmd
- Size
  
  33B
- MD5
  
  f80eef72983614db418a0c1fae21ebc1
- SHA1
  
  1e741199065307b6fe1f820f20e68ea99877a008
- SHA256
  
  8323d52f2ff69fedf02ab6238e9e3319d091e47a13afd17ed0300aad0c0a881e
- SHA512
  
  28e7a256e36fb550f7b49d427162bd18db84ea6c8dbec637f8d50aec086a5522bbb2c5338b669fa80a5d82ba8094d3b815c97fa6fc9513774bba88c1b2aa94f2
Score

1^/10
behavioral11 behavioral12
- Target
  
  Valorant Root TBR12.045/Config/Tools/winrm.cmd
- Size
  
  33B
- MD5
  
  f80eef72983614db418a0c1fae21ebc1
- SHA1
  
  1e741199065307b6fe1f820f20e68ea99877a008
- SHA256
  
  8323d52f2ff69fedf02ab6238e9e3319d091e47a13afd17ed0300aad0c0a881e
- SHA512
  
  28e7a256e36fb550f7b49d427162bd18db84ea6c8dbec637f8d50aec086a5522bbb2c5338b669fa80a5d82ba8094d3b815c97fa6fc9513774bba88c1b2aa94f2
Score

1^/10
behavioral13 behavioral14
- Target
  
  Valorant Root TBR12.045/Config/xwizards.dll
- Size
  
  456KB
- MD5
  
  12dc8c4dc7c8098f69a45a239f37e17e
- SHA1
  
  032e1eaf60f9d1d78d01f4cb323224048e3d9dd1
- SHA256
  
  ef3c900a2ed8998ba52137c7945545f0e5cd195c09fb230f1f67dffdf9dc07c0
- SHA512
  
  65bbcc3576aa7437adaec50e144176f8dc5abfc9df87a196627c3e0a5521d32754401bf985d964777c73c6656af9bc788e6a59924d9bdbf4a233623d8154b006
- SSDEEP
  
  6144:VCHPp6BqWg9Y0WjOgMK0BnEIvZEl7XN8ryn5C+305YrfdA/jzrD68w:cHP0S9YPli3ryL05+A/jD68w
Score

1^/10
behavioral15
- Target
  
  Valorant Root TBR12.045/Config/xwreg.dll
- Size
  
  144KB
- MD5
  
  50abec6003c0f4b378a975e4148d7a59
- SHA1
  
  dd0fd867ee62d9e4992cde75bce57a1cb48c8435
- SHA256
  
  4032e56a18764d599d937e67347920f9e01e95793bb050c374c2e9c0545e9fae
- SHA512
  
  d0cc723bdbf3b79ae682308937927bfc2bfad4dcef207eb30a35ca9b7e91712a1af3e78f87f8345f7429c94dae0953c737a64d9fa7bf344da98328c5bb31cfa5
- SSDEEP
  
  3072:96/qVN8+tnhOq6Aqo0xW0p+2sOeuZn5Xr1nK:98qNthn6Ho05p7wuZn5Xs
Score

1^/10
behavioral16
- Target
  
  Valorant Root TBR12.045/Config/xwtpdui.dll
- Size
  
  284KB
- MD5
  
  9cbd9fecf758de8b3a1efa9f9e7c1466
- SHA1
  
  f68225680b84cb4fcfcbb024cea2661550fec962
- SHA256
  
  49658ba5a24682075f825a7bfac720b488801a8f0ed719aebfed0ddea3be20be
- SHA512
  
  75a131cd131359d83199893f58835d4b79bb604c7aa5e815889294f3ce74472452cc48185f1a63f628528299a7ce03f1fa869dadfbcd037a865f39ca2bcc1117
- SSDEEP
  
  6144:oa/7eo8R4mhk+KCd2uwOwDNNouY3iqo8R3bjskOcudQ9ZCrrMhF3oq/BZf2L:DzeoY4mhk+KCd2uwOwDNNouY3iqo8R3T
Score

1^/10
behavioral17
- Target
  
  Valorant Root TBR12.045/Config/xwtpw32.dll
- Size
  
  168KB
- MD5
  
  6b3be9304d746b56a88307ca0ed84b7a
- SHA1
  
  064545281993369b22e0d3f1129978ee2aabf56f
- SHA256
  
  d5d78b0373c0768628e88affca10718ac767e6f2347e4ce3b5a15a4223703b4a
- SHA512
  
  e7f275a055beb38592d8892242d8b974912b53e0721b4221631038cdd2de27e648ec1890f36efc816d98acdb9ede61b3cf6aecfdf9c3cb84a85cac36d7ff0933
- SSDEEP
  
  3072:WKxOMfRvUPfaAZS2BkMyKw66Tl/PIK5K50QXuc+mCnyYxovYNX2Cza8a+S+LgqoU:5xOwWyAZS2BkMs66Tl/PIEu9Xuc+mSHe
Score

1^/10
behavioral18
- Target
  
  Valorant Root TBR12.045/Config/ze_loader.dll
- Size
  
  376KB
- MD5
  
  58e6b20b730323261529d8eaeced5c75
- SHA1
  
  e1a8efe409d5b41523ec2f89a83179d9cc19d815
- SHA256
  
  580e185dc7c347afd812f957ed59d2005185d20d3ec6bb29a79063bc5723c088
- SHA512
  
  b93ab6e4c8b77540cbdbafbc68db1970f19e389fb5ea86b654d5bf9c2033441885f6caf1f5cf5401847d9f0333c38a9b086b3d5df99dc25c4c8f7bc0c34b8c86
- SSDEEP
  
  6144:0fk24/3bombNlck6+AyjpZwOohFLTg+1D8y:0SombNV3vjo/8y
Score

1^/10
behavioral19 behavioral20
- Target
  
  Valorant Root TBR12.045/Config/ze_tracing_layer.dll
- Size
  
  466KB
- MD5
  
  cae5e052adc0b959dd3e50f69b3cb033
- SHA1
  
  972e1cac08d446920b9bdad546959eb672167de4
- SHA256
  
  56209c34c7f93c78bc190ad294a95096faf334225673f4355f051d68fd6aa606
- SHA512
  
  5ae6d74c5aeaa3249f67507b4808545f2c1f736ffbf26ffa26154078d46c281393ca72cd949c3d6a86d9676286a6b57e3a1381d3548eb47d84784967150ecc9a
- SSDEEP
  
  6144:z4xVHIxXVJlqgxfjsk87QxmLk52c5JMohimFmPaW:EgpfUQxAkN5OoIyW
Score

1^/10
behavioral21 behavioral22
- Target
  
  Valorant Root TBR12.045/Config/ze_validation_layer.dll
- Size
  
  147KB
- MD5
  
  b9f36a591455db33aa09edde42fe7733
- SHA1
  
  9031d4044a6f3a0f9b5c600ce8e63fd04067411a
- SHA256
  
  aa104c934a593349d65d024dc9e0dc0e74e124f316c438cf672f571f1d841233
- SHA512
  
  a98e439e133e093422ec321b8ea878205c3c8cd56566d35d69356a33515f3df022d5d0f1d7b347569b33753038f76ab2abe3a2c989cf914a9b1be9615d20d0e2
- SSDEEP
  
  3072:3XjANes+aUQFJD42JiSYJJM+lGqE+czI:H6oAFJD4I
Score

1^/10
behavioral23 behavioral24
- Target
  
  Valorant Root TBR12.045/Config/zipcontainer.dll
- Size
  
  100KB
- MD5
  
  9a6c6eebf9ade699b2382e9c5c16a86c
- SHA1
  
  c3f0f6afa41d0565587c6e0f9d6fde99555fc238
- SHA256
  
  887cefe8ec5a3ccf4c11f5892f207286d59118bea00b47aadd55ac01ca5502e4
- SHA512
  
  e799a3a311d339bb8fb34fb00480e49d2ef6bc128eb58b8026e67102ebf19e6d3cec82590dd392ec61f2cb0e063e42ae758ec5330b7fc49b4fac4f5422592f84
- SSDEEP
  
  1536:JspXSC2Hauwnicl2/EBu8rVvYRFD7yXpFG2b3DxOn+Mpr:SpXawn5l2/Z8rV0eXy2XxOJpr
Score

1^/10
behavioral25
- Target
  
  Valorant Root TBR12.045/Config/zipfldr.dll
- Size
  
  584KB
- MD5
  
  2364e3cddf6607a722ae1cdda82dfde4
- SHA1
  
  741e5fed94402c0d28004400c658214e90a229f7
- SHA256
  
  d43ce104c0187045c77edc008a6474dd6430a5f77328096389b6ee30662636c2
- SHA512
  
  095e346d3a9b6d63983032e15fe127d15f11c624ae64a9ccb495252817c7038752c11fdd624bdfd74640017380ad381b81d1e42b7ee101b85e2af3924706b61c
- SSDEEP
  
  12288:AuRqjbrkw1dNwxx3ACh+vwFc6v3rqEFLRvuckDHizb/8WHnED+FmGhqGCeaLcGh:ajbrkw17wxx3rh+vwzv3rqEFLRvucaHv
Score

1^/10
behavioral26
- Target
  
  Valorant Root TBR12.045/Config/ztrace_maps.dll
- Size
  
  52KB
- MD5
  
  41eb9cdb412ae8c9dd449170fb2b6f88
- SHA1
  
  146509126398661e427904a0db6dd1d10213e3d0
- SHA256
  
  668592530d2c55ec26a8d1438beb8e37846b3e3a4d9a7d2a0c9b082d48a786a7
- SHA512
  
  080f04e83391f3c2bc0c68846b13710ed2dc63cb2dc25b567e725ab8f7958192cfa27b3799f83672dcc06e91b5a28706ae18b706117ae05773adbf75c51872a1
- SSDEEP
  
  768:1oiZvaSmcCZ+BH9l8Ce2Ap4SZ16m1+e8C:OMiCe2Ap4SfCC
Score

1^/10
behavioral27
- Target
  
  Valorant Root TBR12.045/Resources/LICENSES.chromium.html
- Size
  
  6.5MB
- MD5
  
  796505037e030807d9ddd01c93eb353b
- SHA1
  
  79a1eac3b505e6d94a6206d4a5198d3cc11ab038
- SHA256
  
  9f3f2b4d9bbd3113486839eca85de119fab766450cdca08a4574b80748885708
- SHA512
  
  9435273a4541a579a427a295be47af8b81133896f50c97bab1d8ab391089f90186a7fd057b53e8b74829e4747e98428d8b4d242eb6854b1304a94a2891c2fd11
- SSDEEP
  
  24576:8Pjy5WjWSpgDrAV8gmfwN6i6w6C6g6T+gH3BMbp0W:oJDN
Score

3^/10

discovery
behavioral28 behavioral29
- Target
  
  Valorant Root TBR12.045/Resources/d3dcompiler_47.dll
- Size
  
  3.9MB
- MD5
  
  ab3be0c427c6e405fad496db1545bd61
- SHA1
  
  76012f31db8618624bc8b563698b2669365e49cb
- SHA256
  
  827d12e4ed62520b663078bbf26f95dfd106526e66048cf75b5c9612b2fb7ce6
- SHA512
  
  d1dc2ec77c770c5da99e688d799f88b1e585f8dcf63e6876e237fe7fce6e23b528e6a5ef94ffc68283c60ae4e465ff19d3fd6f2fae5de4504b5479d68cbc4dba
- SSDEEP
  
  98304:q4Xyn7IfxiYMzgom1mEU/AJC/vujMD9rM:809om1hU/Aavu4D9rM
Score

3^/10

discovery
behavioral30
- Target
  
  Valorant Root TBR12.045/Resources/ffmpeg.dll
- Size
  
  2.4MB
- MD5
  
  c921230b4bbe802f0d797db79d0009b9
- SHA1
  
  dd852ce1f82b2daadfb85efa9c53e3264e1d401e
- SHA256
  
  02a6d001e6dd944738e09b720e49dcb1272cb782b870e5ae319d4600bc192225
- SHA512
  
  6acdda7d638609ffa1989e50dde5a51436ae3d98e036b24ffc2c3f08bc0d39e91a5a2ea427063645f3141f06e7c272ca45fd41333d6770f8402651489a0f6da7
- SSDEEP
  
  49152:u/LIKmZb04F/xKbOhyoWKuVWaMhGoEIoqc8:u0vZjgqhyoW9v178
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32