18331f240ea16734c826c76f94fdc82e66d9196276c56800accfd84fe403400d

Sharing

Copy URL Twitter E-mail

General

Target
valorant_unlocker.zip
Size 73.3MB
Sample260515-vftw4ads71
SHA256 18331f240ea16734c826c76f94fdc82e66d9196276c56800accfd84fe403400d
MD5 4aac4e4997dd7843441ab4c6281b3c19
SHA1 4cb37ec3828db7b06c3fcf337fe97f84febf59c4
SHA512 0034d4804e7e92c54cf3c1e1f3fa526fc8bec5464fd49ea3905177c866c55cbf74370373db4abadc777d0be9a473eff0ed2a952e8eb7d2c529e5f368fd47f9d5
SSDEEP 1572864:oq49HlKUCU8naxnaojKLAd6dSO0DftD7z1M6kbbLZUZgJrH6up1ufoyM7cuBVx2i:BUFhC5nap7jBd6dQhDbUcgJraWZyM7c4
TLSH
T190F7333CEC35A4B2EC629F7310E470C64A35FB4A87BEF74A6623A88964123D115735B7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery

Malware Config

Targets

- Target
  valorant_unlocker.zip
- Size 73.3MB
- SHA256 18331f240ea16734c826c76f94fdc82e66d9196276c56800accfd84fe403400d
- MD5 4aac4e4997dd7843441ab4c6281b3c19
- SHA1 4cb37ec3828db7b06c3fcf337fe97f84febf59c4
- SHA512 0034d4804e7e92c54cf3c1e1f3fa526fc8bec5464fd49ea3905177c866c55cbf74370373db4abadc777d0be9a473eff0ed2a952e8eb7d2c529e5f368fd47f9d5
- SSDEEP 1572864:oq49HlKUCU8naxnaojKLAd6dSO0DftD7z1M6kbbLZUZgJrH6up1ufoyM7cuBVx2i:BUFhC5nap7jBd6dQhDbUcgJraWZyM7c4
- TLSH
  T190F7333CEC35A4B2EC629F7310E470C64A35FB4A87BEF74A6623A88964123D115735B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  valorant_unlocker/143.0.7499.110/chrome_elf.dll
- Size 2.6MB
- SHA256 564cb9202ba0a312a6135204bd0e8ab2b6fef3954db3507db31aaa2e6cd2b584
- MD5 c7da437e40c9c55e4c269feb404a430d
- SHA1 e39d0aeef72f19abd3eecfdfbb489655be941dbc
- SHA512 e9a5b1cb838c5381dbfaeac7b62e6db11d939262ee6b2e07cbcad8ec0fad638a362c828166e614d18786489cae2c9947188915de1fcd60f5756e81346334b90a
- SSDEEP 24576:CRT505L8zjPrDh9qa+xWZHIm6HSUcmc17cvgHCxa57Z9:
- TLSH
  T1A0C588F0AD01D8C1F57E5B7AF3ED7908A1343227EADD5A4A00A466591EF6A01FD0ECC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  valorant_unlocker/backup/amd64/cmm/charsets.jar
- Size 2.9MB
- SHA256 30b3b694efd41128b01ef192182ce48656973866e2b64754a9bca6683fcde90a
- MD5 395bf6081334f01b8a33b3d636756a86
- SHA1 d6321f1155fff108b5a11f9953a7ecd61620859c
- SHA512 049ee9fe16e0a3992b52ba6abba7fd3a5007e86665f21487a57a4294370fa096b18dc29636eb81fe1470d6fdbe25a15b31b4d1b3ab21e9fddfd7de57fa1dc1ab
- SSDEEP 49152:osixGz1n4jCewNvUc/pItUcT1nvv4clbIyWNN:osiMzNFZb2/n3ZlbI9
- TLSH
  T126E5AFD344491EAFD60B52BF1B60ED0B770E78A61907B240FDBA4C19EA5C62F64D2F21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  valorant_unlocker/backup/amd64/cmm/deploy.jar
- Size 4.8MB
- SHA256 f4e95eea5514653e0d01c99378d482c41d4833857b796a535c8f47e178b54c75
- MD5 8654ed204f7b53b562f7bfdbf7270d51
- SHA1 4aeb57be056d2ae09127f0b02b53fd99c0dcfec5
- SHA512 46cdf45fb73ba1785ce7259b071011b8a0d457bb83020effd6408dfae9a9a9b2a9f2dfa68841f23713dea1c65e1929ec70fdff2642b970840f4e5473847484ca
- SSDEEP 49152:grlLf03SJ+vH8wi7pmb7kfBIp5pdu6jHtfRVA+vr:NZn1Re+vr
- TLSH
  T195367C7BF108B477EE43C6F7A41307A472623AB48503E1E0AEE94F51E7C859D4BA51E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  valorant_unlocker/backup/amd64/cmm/javaws.jar
- Size 934KB
- SHA256 396f2d3154756a58a802e2d3a8cd87a04da832168f3ca06a75285cbadee1f6b8
- MD5 a08cee1608602206e191168dcc103542
- SHA1 a8feff3b2aa2fd53c32eab195ef87268f66ef6c2
- SHA512 db0ed2c2b4d133a98d1ad0007f34d41dadda1d3196fa90712fb7d55e074aaad7ebaf15c6cc4d2ba6ecab649d513296b7de32acb82851c0234978b9f40fd413f1
- SSDEEP 6144:4IkXEYiwz2aWlyAQmwCBitgVE49L2ugHHz274rZzd5AHYa3hztQofKJMNFty+jsQ:IETlyIBSa2DaozCPZ
- TLSH
  T19415C517F30AD5EBFD52D2FF5A6303543A60A8305122A1F99F950C03AEF4E574B712AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  valorant_unlocker/backup/amd64/cmm/jsse.jar
- Size 1.7MB
- SHA256 7b125f8fe4815faa5be93db0cd7152ae70a7034d889a06f085b11141e80b619c
- MD5 a01a8f6587e34d3ab4497b6c1e92b663
- SHA1 6781d859142209309fec84ebfc833b049f9c6997
- SHA512 d8f8508c8012ce0b3bc525d8eba5667aca5719785e66785f215a90356480202edd084fac10aa8458cf19c83f889555c17f86491352f6b5e1d58f2a3f84459964
- SSDEEP 12288:mj1qLoQa9DEwXKwxQqd1mcTIfMgocoNTPHOQwa3:mj1rzXKwxTdnT20cCH
- TLSH
  T1EA858217E20C99BFF244D9FFED70022837346C365C63B3784A49491AF1DA6B14A78AE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  valorant_unlocker/backup/amd64/cmm/plugin.jar
- Size 1.8MB
- SHA256 7e386b771f7728c62a120e1f1c13fbe40526e59856552fb21661a9611f6f181b
- MD5 6788225da55a061cab584c7b589e9c6a
- SHA1 dae115736a68f1a6e7b5e3a7b30531a3c0d74483
- SHA512 cce73bf7da384136fb5dc181e3a4cbad4c6f9dc94033de0a76da39734e9a297f38e2dacb370e8827a7df94e1b91519262a00b6c113eca7a32e0d8e8e1e24a68b
- SSDEEP 12288:R7qUN6A8uJBLvaU0TUX+Bk3PmgXOK9U+C:RGUN1VJNGczXOwC
- TLSH
  T149950A27E304D89FFA35F1FE241513903326A9746A02F2A16F7E4C275ED59E287522F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  valorant_unlocker/backup/applet/ShadowPlay/NVSPCAPS/_nvspcaps64.dll
- Size 2.7MB
- SHA256 caef12c56aea4ac3bb753567dfe550a231517e51c13431185131420968e5685e
- MD5 dfac0820398d9f403047fcf953df273e
- SHA1 63054c7b090cf28d3752b5bf0c1dbe7a412d147f
- SHA512 37533fc8ded43c9ad6cd52d47c1f4f535ba56dffd09f9cb71c21e9107b8b3b4dd400dd412c0a1d789bc590fca8223999142216f93f066664d82b70653273b795
- SSDEEP 24576:IpxtRcVVVVVVVVV8HhtrOKa3PH89wev0WFG2x8jneVOsU9sFyk5lnP2YJbz9STPQ:ex4VVVVVVVV6c32x8jns5t20QTP1q
- TLSH
  T11AD5191E67E01B94CC77D238C9864668E9B034B10B2A8ACB51166B595E33FFA0F3DF54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  valorant_unlocker/backup/applet/ShadowPlay/NvRemux.dll
- Size 664KB
- SHA256 fabcfa2956579919b28289fbf27dc31816b958512e54f58544740155fa362393
- MD5 301802a68433adeed2f5bade486ee4d5
- SHA1 eb84b9cd4b95488bab3f85947b229718e64fa1e7
- SHA512 e165830792a267d03aea7398b7c483753606b90e929bd8e75ed527e02b23c43b2245165ad5766c2194768b3524fb1f159fc49a7bd21500961e590b5f205d974d
- SSDEEP 12288:OnVt5PlEgrgbHyxP2MjwTkV5EiMzKjjZl7WT4A:OVySjwQV5rFjdRWc
- TLSH
  T1EDE49F207881C176DDEA20FA86FC7931586CA5B0033489D35AD987FADE742D23B3F956
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  valorant_unlocker/backup/applet/ShadowPlay/Plugins/LocalSystem/_nvspserviceplugin64.dll
- Size 680KB
- SHA256 030df582ebd1b0e1ddef21e14b4de6ef292f983bc6541abab3416c0a45d46a68
- MD5 6a04bf5c5ca2fb95aac4714460246699
- SHA1 f37870c3a34c23beb2ce561d9402cb8e35b9ec14
- SHA512 ed50b8d4ab86aa255b536b203f4aea7188f4d1be2a87ae25e3557111bda27bb5016b52e6c210b7ec069cbd7a34d72a10f088125505c157f61a121e86a3bb65ae
- SSDEEP 12288:ViafQWasuH1mJO26zQVSBn4sVJGdDgr8yVgJKRvysH:kafHO26zKSJJGdDgr8q/ssH
- TLSH
  T164E47C597798129AD17BD13DC6874B2ADA7278011321F7CF01A443AE1F27BE86A3F724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  valorant_unlocker/backup/applet/ShadowPlay/cudart64_55.dll
- Size 296KB
- SHA256 f6d2e11b1e57be0c816f9a9ba5a94fce569a7884fc3771c23ddbb49127a8d194
- MD5 2b4e5f399eee805bfa25626704615a53
- SHA1 d2aec91d560eec69e4fc2b6b8964292e7da4537a
- SHA512 26d8359f58b5386ee48761f51fc2bed9d8e593c9e057a5791b3abcc8eb8febcee4da2283470944496e6a7cc7d2a63255f731944c02eb145ba3dcbdfa67e0bb2d
- SSDEEP 6144:H34rX7AGjLfcPOC+gBsxqT2ltwShG65M8:H34rX7AGjLfGJ+gyj5M
- TLSH
  T1F8543B59736C1CACE167D3B859664906D7B2F8134371A3CB13D40ABA5B63BE2663F304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  valorant_unlocker/backup/applet/ShadowPlay/ipccommon64.dll
- Size 591KB
- SHA256 13e10f26ea6623f854cab11e28ce7bb97bc6b4b7490b44c054fbf263ee1de340
- MD5 90a9d0b784a144fa418c4b1724aa7f29
- SHA1 bf1db791ac00468756cf16f0ec89c438f0831057
- SHA512 da9928f885180926d65c0f031591a2689a31a43f63a261e551980de637a3014712ceb2a52e434d9cc2d068ab7b2d6f417dbd8305620418bad60e9cc5e7a8e15c
- SSDEEP 6144:ziqf3sq4Ivjea2vwObfTkNfcvObZSyZWu3AGcLHO1qvxmupqKxHc:bf3sq4ZpPpOhWulcLHO1qvxwK
- TLSH
  T1D5D46D0A339447B6D177C23DC9938B45DAB174554B21A7CF12E483AE2F23BE54A3E325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  valorant_unlocker/backup/applet/ShadowPlay/nvspscreenshot64.dll
- Size 617KB
- SHA256 cde3694deac003e0bc5244dd1c7d4cb6bd886997d1a7bb5a2fbbaac9b5ffd4f1
- MD5 9bd3b14254d39125bb72aa9064acc41c
- SHA1 8f1a6d7417be798687d9091ea7249a770aca6f3c
- SHA512 c40555fff8b6b7f8ded5e2710a124d5023ab37b1cae1c3d25961e60982decd186823db44ae35956863a280036ffb2c71099d98f64fbb0588679a9a8afa2d6767
- SSDEEP 12288:7UbPdnIzZ7uOow+J737lG3izJqK8BPNT:obPpIzZ7uOb+J737lG3ilqK8BPNT
- TLSH
  T11BD48DA637941296D17BD23DCA874B6ADA7274114731A7CF02D843AE1E13BE81B3F724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  valorant_unlocker/backup/ext/deploy/jce.jar
- Size 119KB
- SHA256 4362c179bb78107777d6a0557693e65eb2b318c26642162f89509dfdab8c97fe
- MD5 e0b7e0f36b9fc43d13403145db82e758
- SHA1 def42078cfa315e98393c69963efb4e35e2e28a8
- SHA512 5074a7ceb9621096f3bbf419d32ac260ea6d9d09c758544c2761121026c2b9db0b6617806d3b692347b685d541123f4eda99dcbaa29d9c9a2d740b22c44bf7bb
- SSDEEP 3072:p+uhK+XLGLuDfH3HiMAHElMueD+UgUBvVE:/f6Y3HiLvJ+Uju
- TLSH
  T145C3E029BEA8EA25FE53C03E9870D833B81E46C9970B8387879584E860F4DD45F12FD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  valorant_unlocker/backup/ext/deploy/jfr.jar
- Size 563KB
- SHA256 7d378f84b2b5781531f6ae8d66c8dbcb9b68b69299321a3d0dace42db8e887d2
- MD5 f24955495625ff0d961245dec08ad538
- SHA1 c2a199daa4309d7ff3bc7eaea59a25fd913360fb
- SHA512 24da53cdeb176f66bd15d52dcbff3edf02d90b4404924f86860397bd795a71a7f6d6351bb95cb614becfa519c630d801f563ebcd9a68a9a2383697c37807327a
- SSDEEP 12288:I5l+qU67FYWg+YWgYWeoXqgYSqYQh2f/m5NwaHkSIJHvWQ6Q7ooMcgH5lY7TQ5cE:I5l+qU67FYWg+YWgYWeoXqgYSqYQh2fA
- TLSH
  T186C4C70FF19A25EFF280E63F29918FA422F0D472032BE6614F159D5A1DDB9D7EA006C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  valorant_unlocker/backup/ext/deploy/jfxswt.jar
- Size 33KB
- SHA256 d4e365ea4ea97e379406a5eb00cae8847555bb62448d4b84da7ccfe2b35eece1
- MD5 bd299d76f2e97783f5ad5f9c964b6e8c
- SHA1 8655caa4b50e8e6b54847bdd2d3d40b58235d33f
- SHA512 a9e7088aebe1a031f6b7bacf87229c3420387e44c586c8d65fceaec253ecc8fab12afa489b8674eab88beec8646f2eaf8fb0141977137059c249e7fdde0f2186
- SSDEEP 768:QYjqzksT47sUgLJICsdU19SKYqLkClJzliojd+WIGArb4:QY2zvTI/gaCsdU1cj8Tjd+W9mb4
- TLSH
  T18DE2E19646DE1D12DA1387763F504A933C2F43D484579B3AD71E84E1E4B6D28FB233A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32