Resubmissions

24/08/2024, 03:44

240824-eap3ystbql 7

Analysis

  • max time kernel
    135s
  • max time network
    104s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/08/2024, 03:44

General

  • Target

    Valorant-Triggerbot-main/Unique.py

  • Size

    804B

  • MD5

    cbf809c517ae2d3b58a788eaaba04009

  • SHA1

    868e4b22cda54c47eece841e0a040b2a5b11fdfc

  • SHA256

    d35e8ef7963aca5e28402b0a1fe9d7a1c501b5509d557c1183334bd63ad8e93f

  • SHA512

    c2b53d173b51f398c1924f084d545113122f562a98bab3b9d99ec87f81729f525d28bc5252cdb296a971c0a95bd6cc6661176f2ad54b8394e577083b759f07c2

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Valorant-Triggerbot-main\Unique.py
    1⤵
    • Modifies registry class
    PID:948
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:2648

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads