General

  • Target

    Edward_FreeValorantSpoofer.zip

  • Size

    73KB

  • MD5

    5bcd9d5b4883de29f15e1d15084f7e9f

  • SHA1

    409c2e39078f805b86b04dd128d83bc1410e6f92

  • SHA256

    eece9df07de786c53b3c838385e5bc3bacdfda48400922d1d42ef3d2aa0de6a0

  • SHA512

    11f7f5b042c43ddde85997a8ffc6726daa16cbfc3db59cb66059061538c9fdcd85b60e6d0e573d81dc964bf59ffaa9be23dcb3a05c482a4086d76aa58596ed6a

  • SSDEEP

    1536:lwXVf+MB+VMXRx66/yWl35kfm8C52LVNQl5DXYm94hHnSYz8lrt1DdWN:qF+MBxBxhtaU2sXJ4hHnN8JUN

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Edward_FreeValorantSpoofer.zip
    .zip
  • edward.py
  • files/mapper..exe
    .exe windows:6 windows x64 arch:x64

    5316a309ccf25a6ed74424e6475fbb52


    Headers

    Imports

    Sections

  • files/randomization.sys
    .sys windows:10 windows x64 arch:x64

    9cd3a2254af2c5c16a99addca383bf7f


    Code Sign

    Headers

    Imports

    Sections

  • install.bat