Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260630-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/07/2026, 22:18
Static task
static1
Behavioral task
behavioral1
Sample
Install VALORANT.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Install VALORANT.exe
Resource
win11ltsc2024-20260630-en
1 signatures
150 seconds
General
- Target Install VALORANT.exe
- Size 71.3MB
- Sample260701-18d91aft2q
- SHA256 ce56cdb2b0a7d27be939e201fd6f814f70b881b5f4f58dfcb1ed5f9ff0b5a86a
- MD5 16e09158a22085340569d473b04846bc
- SHA1 c85127f1dc04cc7e7d87cceeb6b734c67a996c79
- SHA512 134b13400480ececc77d7e6881bd9d172f092ad39d797ab5e14556d65a5d02175fa742a91a107b21e24d3e29d1b216e7ec1b75f89c118c34812b437fdc5543fa
- SSDEEP 1572864:hqX2BSp8d0UNl/Ywrt9E7lzPFUKBBJDIVIbjSp1xet:grp8dnAthBBJDIVRjU
- TLSH T17CF7121EB96800EDC8BFD17896DA5917EA7138560320B6DB32E0DD612F53AF85E3D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 5568 wrote to memory of 5816 5568 Install VALORANT.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\Install VALORANT.exe"C:\Users\Admin\AppData\Local\Temp\Install VALORANT.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:5568 -
C:\Users\Admin\AppData\Local\Temp\Install VALORANT.exe"C:\Users\Admin\AppData\Local\Temp\Install VALORANT.exe" --agent --riotclient-app-port=60437 --riotclient-auth-token=dJROU8hx3cUNxTX8E9e9IA --app-root=C:/Users/Admin/AppData/Local/Temp "--data-root=C:/ProgramData/Riot Games/Metadata" "--update-root=C:/ProgramData/Riot Games/Metadata/Install VALORANT/Update" "--log-root=C:/Users/Admin/AppData/Local/Riot Games/Install VALORANT/Logs" "--user-data-root=C:/Users/Admin/AppData/Local/Riot Games/Install VALORANT" --session-id=6114392a-786a-214f-ae8a-583a4d389dbe2⤵PID:5816
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\Riot Games\machine.cfg
- Size 39B
- SHA256 c1054863ba74f90beff89d779a752812e27d4407c69c91e8e21519dfd40742dd
- MD5 9cde2898bd16c730ccbf2736ddac3a28
- SHA1 414ee1291015c68512e34bed2f3376cfae858959
- SHA512 d26a1f6c45cd11820f1b9dfe828b44e9802e9d298cc5414128f8ffe29f31841d3b98f69ec70c85f3b8059d5b1a0700b6eec3e16966e871f011aa385a8fcb8945
- MD5 SHA1 SHA512