d4164de4346c0171abc1a6dccf53bed9ecea063ad0a91a96523f825f58816d7b

Resubmissions

08/07/2026, 23:44

260708-3rjt9sav8p8

08/07/2026, 23:42

260708-3p6agsav5j8

Sharing

Copy URL Twitter E-mail

General

Target
valorant_unlocker.zip
Size 69.6MB
Sample260708-3p6agsav5j
SHA256 d4164de4346c0171abc1a6dccf53bed9ecea063ad0a91a96523f825f58816d7b
MD5 952205f4cbafc6c52b6db2f1a85a500e
SHA1 3714853c2f2dd8af507fce8e617d4213cc1d9148
SHA512 02cc003418643776e12bf31c2b285f1153e170232ac8d85fad0796a772a52ef7573108921c230bf031311144eabac58146343a6f1468ff884eea3fa98a71fe5c
SSDEEP 1572864:l7LwHTeFBFbTELtTGca5RPtYi6uX+WgiCQn3ZiNmom9/KUlGqmeEVels6b:lPITeFbfeT8Nh+WuY3Zifm9/ZFmOlR
TLSH
T1D4F733B469331114C3E50AB5E962AC33B79F79C5322AB5807DF2441A721AE6DC370BDB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  valorant_unlocker.zip
- Size 69.6MB
- SHA256 d4164de4346c0171abc1a6dccf53bed9ecea063ad0a91a96523f825f58816d7b
- MD5 952205f4cbafc6c52b6db2f1a85a500e
- SHA1 3714853c2f2dd8af507fce8e617d4213cc1d9148
- SHA512 02cc003418643776e12bf31c2b285f1153e170232ac8d85fad0796a772a52ef7573108921c230bf031311144eabac58146343a6f1468ff884eea3fa98a71fe5c
- SSDEEP 1572864:l7LwHTeFBFbTELtTGca5RPtYi6uX+WgiCQn3ZiNmom9/KUlGqmeEVels6b:lPITeFbfeT8Nh+WuY3Zifm9/ZFmOlR
- TLSH
  T1D4F733B469331114C3E50AB5E962AC33B79F79C5322AB5807DF2441A721AE6DC370BDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  valorant_unlocker/143.0.7499.110/chrome_elf.dll
- Size 2.6MB
- SHA256 564cb9202ba0a312a6135204bd0e8ab2b6fef3954db3507db31aaa2e6cd2b584
- MD5 c7da437e40c9c55e4c269feb404a430d
- SHA1 e39d0aeef72f19abd3eecfdfbb489655be941dbc
- SHA512 e9a5b1cb838c5381dbfaeac7b62e6db11d939262ee6b2e07cbcad8ec0fad638a362c828166e614d18786489cae2c9947188915de1fcd60f5756e81346334b90a
- SSDEEP 24576:CRT505L8zjPrDh9qa+xWZHIm6HSUcmc17cvgHCxa57Z9:
- TLSH
  T1A0C588F0AD01D8C1F57E5B7AF3ED7908A1343227EADD5A4A00A466591EF6A01FD0ECC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  valorant_unlocker/backup/amd64/cmm/charsets.jar
- Size 2.9MB
- SHA256 30b3b694efd41128b01ef192182ce48656973866e2b64754a9bca6683fcde90a
- MD5 395bf6081334f01b8a33b3d636756a86
- SHA1 d6321f1155fff108b5a11f9953a7ecd61620859c
- SHA512 049ee9fe16e0a3992b52ba6abba7fd3a5007e86665f21487a57a4294370fa096b18dc29636eb81fe1470d6fdbe25a15b31b4d1b3ab21e9fddfd7de57fa1dc1ab
- SSDEEP 49152:osixGz1n4jCewNvUc/pItUcT1nvv4clbIyWNN:osiMzNFZb2/n3ZlbI9
- TLSH
  T126E5AFD344491EAFD60B52BF1B60ED0B770E78A61907B240FDBA4C19EA5C62F64D2F21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  valorant_unlocker/backup/amd64/cmm/deploy.jar
- Size 4.8MB
- SHA256 f4e95eea5514653e0d01c99378d482c41d4833857b796a535c8f47e178b54c75
- MD5 8654ed204f7b53b562f7bfdbf7270d51
- SHA1 4aeb57be056d2ae09127f0b02b53fd99c0dcfec5
- SHA512 46cdf45fb73ba1785ce7259b071011b8a0d457bb83020effd6408dfae9a9a9b2a9f2dfa68841f23713dea1c65e1929ec70fdff2642b970840f4e5473847484ca
- SSDEEP 49152:grlLf03SJ+vH8wi7pmb7kfBIp5pdu6jHtfRVA+vr:NZn1Re+vr
- TLSH
  T195367C7BF108B477EE43C6F7A41307A472623AB48503E1E0AEE94F51E7C859D4BA51E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral4
- Target
  valorant_unlocker/backup/amd64/cmm/javaws.jar
- Size 934KB
- SHA256 396f2d3154756a58a802e2d3a8cd87a04da832168f3ca06a75285cbadee1f6b8
- MD5 a08cee1608602206e191168dcc103542
- SHA1 a8feff3b2aa2fd53c32eab195ef87268f66ef6c2
- SHA512 db0ed2c2b4d133a98d1ad0007f34d41dadda1d3196fa90712fb7d55e074aaad7ebaf15c6cc4d2ba6ecab649d513296b7de32acb82851c0234978b9f40fd413f1
- SSDEEP 6144:4IkXEYiwz2aWlyAQmwCBitgVE49L2ugHHz274rZzd5AHYa3hztQofKJMNFty+jsQ:IETlyIBSa2DaozCPZ
- TLSH
  T19415C517F30AD5EBFD52D2FF5A6303543A60A8305122A1F99F950C03AEF4E574B712AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5
- Target
  valorant_unlocker/backup/amd64/cmm/jsse.jar
- Size 1.7MB
- SHA256 7b125f8fe4815faa5be93db0cd7152ae70a7034d889a06f085b11141e80b619c
- MD5 a01a8f6587e34d3ab4497b6c1e92b663
- SHA1 6781d859142209309fec84ebfc833b049f9c6997
- SHA512 d8f8508c8012ce0b3bc525d8eba5667aca5719785e66785f215a90356480202edd084fac10aa8458cf19c83f889555c17f86491352f6b5e1d58f2a3f84459964
- SSDEEP 12288:mj1qLoQa9DEwXKwxQqd1mcTIfMgocoNTPHOQwa3:mj1rzXKwxTdnT20cCH
- TLSH
  T1EA858217E20C99BFF244D9FFED70022837346C365C63B3784A49491AF1DA6B14A78AE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  valorant_unlocker/backup/amd64/cmm/plugin.jar
- Size 1.8MB
- SHA256 7e386b771f7728c62a120e1f1c13fbe40526e59856552fb21661a9611f6f181b
- MD5 6788225da55a061cab584c7b589e9c6a
- SHA1 dae115736a68f1a6e7b5e3a7b30531a3c0d74483
- SHA512 cce73bf7da384136fb5dc181e3a4cbad4c6f9dc94033de0a76da39734e9a297f38e2dacb370e8827a7df94e1b91519262a00b6c113eca7a32e0d8e8e1e24a68b
- SSDEEP 12288:R7qUN6A8uJBLvaU0TUX+Bk3PmgXOK9U+C:RGUN1VJNGczXOwC
- TLSH
  T149950A27E304D89FFA35F1FE241513903326A9746A02F2A16F7E4C275ED59E287522F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  valorant_unlocker/backup/applet/ShadowPlay/NVSPCAPS/_nvspcaps64.dll
- Size 2.7MB
- SHA256 caef12c56aea4ac3bb753567dfe550a231517e51c13431185131420968e5685e
- MD5 dfac0820398d9f403047fcf953df273e
- SHA1 63054c7b090cf28d3752b5bf0c1dbe7a412d147f
- SHA512 37533fc8ded43c9ad6cd52d47c1f4f535ba56dffd09f9cb71c21e9107b8b3b4dd400dd412c0a1d789bc590fca8223999142216f93f066664d82b70653273b795
- SSDEEP 24576:IpxtRcVVVVVVVVV8HhtrOKa3PH89wev0WFG2x8jneVOsU9sFyk5lnP2YJbz9STPQ:ex4VVVVVVVV6c32x8jns5t20QTP1q
- TLSH
  T11AD5191E67E01B94CC77D238C9864668E9B034B10B2A8ACB51166B595E33FFA0F3DF54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  valorant_unlocker/backup/applet/ShadowPlay/NvRemux.dll
- Size 664KB
- SHA256 fabcfa2956579919b28289fbf27dc31816b958512e54f58544740155fa362393
- MD5 301802a68433adeed2f5bade486ee4d5
- SHA1 eb84b9cd4b95488bab3f85947b229718e64fa1e7
- SHA512 e165830792a267d03aea7398b7c483753606b90e929bd8e75ed527e02b23c43b2245165ad5766c2194768b3524fb1f159fc49a7bd21500961e590b5f205d974d
- SSDEEP 12288:OnVt5PlEgrgbHyxP2MjwTkV5EiMzKjjZl7WT4A:OVySjwQV5rFjdRWc
- TLSH
  T1EDE49F207881C176DDEA20FA86FC7931586CA5B0033489D35AD987FADE742D23B3F956
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9
- Target
  valorant_unlocker/backup/applet/ShadowPlay/Plugins/LocalSystem/_nvspserviceplugin64.dll
- Size 680KB
- SHA256 030df582ebd1b0e1ddef21e14b4de6ef292f983bc6541abab3416c0a45d46a68
- MD5 6a04bf5c5ca2fb95aac4714460246699
- SHA1 f37870c3a34c23beb2ce561d9402cb8e35b9ec14
- SHA512 ed50b8d4ab86aa255b536b203f4aea7188f4d1be2a87ae25e3557111bda27bb5016b52e6c210b7ec069cbd7a34d72a10f088125505c157f61a121e86a3bb65ae
- SSDEEP 12288:ViafQWasuH1mJO26zQVSBn4sVJGdDgr8yVgJKRvysH:kafHO26zKSJJGdDgr8q/ssH
- TLSH
  T164E47C597798129AD17BD13DC6874B2ADA7278011321F7CF01A443AE1F27BE86A3F724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  valorant_unlocker/backup/applet/ShadowPlay/cudart64_55.dll
- Size 296KB
- SHA256 f6d2e11b1e57be0c816f9a9ba5a94fce569a7884fc3771c23ddbb49127a8d194
- MD5 2b4e5f399eee805bfa25626704615a53
- SHA1 d2aec91d560eec69e4fc2b6b8964292e7da4537a
- SHA512 26d8359f58b5386ee48761f51fc2bed9d8e593c9e057a5791b3abcc8eb8febcee4da2283470944496e6a7cc7d2a63255f731944c02eb145ba3dcbdfa67e0bb2d
- SSDEEP 6144:H34rX7AGjLfcPOC+gBsxqT2ltwShG65M8:H34rX7AGjLfGJ+gyj5M
- TLSH
  T1F8543B59736C1CACE167D3B859664906D7B2F8134371A3CB13D40ABA5B63BE2663F304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  valorant_unlocker/backup/applet/ShadowPlay/ipccommon64.dll
- Size 591KB
- SHA256 13e10f26ea6623f854cab11e28ce7bb97bc6b4b7490b44c054fbf263ee1de340
- MD5 90a9d0b784a144fa418c4b1724aa7f29
- SHA1 bf1db791ac00468756cf16f0ec89c438f0831057
- SHA512 da9928f885180926d65c0f031591a2689a31a43f63a261e551980de637a3014712ceb2a52e434d9cc2d068ab7b2d6f417dbd8305620418bad60e9cc5e7a8e15c
- SSDEEP 6144:ziqf3sq4Ivjea2vwObfTkNfcvObZSyZWu3AGcLHO1qvxmupqKxHc:bf3sq4ZpPpOhWulcLHO1qvxwK
- TLSH
  T1D5D46D0A339447B6D177C23DC9938B45DAB174554B21A7CF12E483AE2F23BE54A3E325
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  valorant_unlocker/backup/applet/ShadowPlay/nvspscreenshot64.dll
- Size 617KB
- SHA256 cde3694deac003e0bc5244dd1c7d4cb6bd886997d1a7bb5a2fbbaac9b5ffd4f1
- MD5 9bd3b14254d39125bb72aa9064acc41c
- SHA1 8f1a6d7417be798687d9091ea7249a770aca6f3c
- SHA512 c40555fff8b6b7f8ded5e2710a124d5023ab37b1cae1c3d25961e60982decd186823db44ae35956863a280036ffb2c71099d98f64fbb0588679a9a8afa2d6767
- SSDEEP 12288:7UbPdnIzZ7uOow+J737lG3izJqK8BPNT:obPpIzZ7uOb+J737lG3ilqK8BPNT
- TLSH
  T11BD48DA637941296D17BD23DCA874B6ADA7274114731A7CF02D843AE1E13BE81B3F724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  valorant_unlocker/backup/ext/deploy/jce.jar
- Size 119KB
- SHA256 4362c179bb78107777d6a0557693e65eb2b318c26642162f89509dfdab8c97fe
- MD5 e0b7e0f36b9fc43d13403145db82e758
- SHA1 def42078cfa315e98393c69963efb4e35e2e28a8
- SHA512 5074a7ceb9621096f3bbf419d32ac260ea6d9d09c758544c2761121026c2b9db0b6617806d3b692347b685d541123f4eda99dcbaa29d9c9a2d740b22c44bf7bb
- SSDEEP 3072:p+uhK+XLGLuDfH3HiMAHElMueD+UgUBvVE:/f6Y3HiLvJ+Uju
- TLSH
  T145C3E029BEA8EA25FE53C03E9870D833B81E46C9970B8387879584E860F4DD45F12FD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral14
- Target
  valorant_unlocker/backup/ext/deploy/jfr.jar
- Size 563KB
- SHA256 7d378f84b2b5781531f6ae8d66c8dbcb9b68b69299321a3d0dace42db8e887d2
- MD5 f24955495625ff0d961245dec08ad538
- SHA1 c2a199daa4309d7ff3bc7eaea59a25fd913360fb
- SHA512 24da53cdeb176f66bd15d52dcbff3edf02d90b4404924f86860397bd795a71a7f6d6351bb95cb614becfa519c630d801f563ebcd9a68a9a2383697c37807327a
- SSDEEP 12288:I5l+qU67FYWg+YWgYWeoXqgYSqYQh2f/m5NwaHkSIJHvWQ6Q7ooMcgH5lY7TQ5cE:I5l+qU67FYWg+YWgYWeoXqgYSqYQh2fA
- TLSH
  T186C4C70FF19A25EFF280E63F29918FA422F0D472032BE6614F159D5A1DDB9D7EA006C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15
- Target
  valorant_unlocker/backup/ext/deploy/jfxswt.jar
- Size 33KB
- SHA256 d4e365ea4ea97e379406a5eb00cae8847555bb62448d4b84da7ccfe2b35eece1
- MD5 bd299d76f2e97783f5ad5f9c964b6e8c
- SHA1 8655caa4b50e8e6b54847bdd2d3d40b58235d33f
- SHA512 a9e7088aebe1a031f6b7bacf87229c3420387e44c586c8d65fceaec253ecc8fab12afa489b8674eab88beec8646f2eaf8fb0141977137059c249e7fdde0f2186
- SSDEEP 768:QYjqzksT47sUgLJICsdU19SKYqLkClJzliojd+WIGArb4:QY2zvTI/gaCsdU1cj8Tjd+W9mb4
- TLSH
  T18DE2E19646DE1D12DA1387763F504A933C2F43D484579B3AD71E84E1E4B6D28FB233A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16
- Target
  valorant_unlocker/backup/ext/deploy/management-agent.jar
- Size 382B
- SHA256 5e56a28c31cf1d6ae5ac902d9466855ec64c6de09dc026b83f29432ecedf9a76
- MD5 bbd37f88b63c35ae38729fdc1a39943d
- SHA1 6b6cb011fd143ca3389fc811aa2c049e12886115
- SHA512 71d0bb35c24df823bd089067978f94e344ebb17220c46168400b1cfd01ceafc79ce553f0686885e8ee5a5598248a850c05fcd7115a433f926696b264088239c2
- TLSH
  T158E072383FECD04FFB0E7BB00382A35F666A00842B4C03470B0068880E34E861D13ECA
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral17
- Target
  valorant_unlocker/backup/ext/deploy/messages.properties
- Size 2KB
- SHA256 926ccadaec649f621590d1aa5e915481016564e7ab28390c8d68bdaaf4785f1f
- MD5 811bafa6f97801186910e9b1d9927fe2
- SHA1 dc52841c708e3c1eb2a044088a43396d1291bb5e
- SHA512 5ae9c27dce552ea32603b2c87c1510858f86d9d10cade691b2e54747c3602fe75de032cf8917dcd4ee160ee4cc5be2e708b321bb1d5cdebfa9fe46c2f870ca7c
- TLSH
  T1BC5172DB882623776BC300F2900E60A79BF0706AEBF20139BC0E51A4E3DF761D927550
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware discovery persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral18
- Target
  valorant_unlocker/backup/ext/deploy/messages_de.properties
- Size 3KB
- SHA256 c9399a33bb9c75345130b99d1d7ce886d9148f1936543587848c47b8540da640
- MD5 d77c3b5274b8161328ab5c78f66dd0d0
- SHA1 d989fe1b8f7904888d5102294ebefd28d932ecdb
- SHA512 696e28b6bc7e834c51ab9821d0d65d1a32f00eb15caa732047b751288ea73d8d703d3152bf81f267147f8c1538e1bf470748df41176392f10e622f4c7708dd92
- TLSH
  T14C61B78F8CA123177B850363F626D3CBA7BF51527326402DB84D116C9B876B355AB23B
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware discovery persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19
- Target
  valorant_unlocker/backup/icudtl.dat
- Size 10.0MB
- SHA256 27993e2079711d5f0f04a72f48fee88b269604c8e3fbdf50a7f7bb3f5bfc8d8e
- MD5 9732e28c054db1e042cd306a7bc9227a
- SHA1 6bab2e77925515888808c1ef729c5bb1323100dd
- SHA512 3eb67ab896a56dab4a2d6eea98f251affd6864c5f5b24f22b61b6acc1df4460d86f0a448f1983aac019e79ff930286c3510891be9d48ef07a93ff975a0e55335
- SSDEEP 196608:Ub+wSv9AAQbNjliXUxR0rHf93WhlA6tj1w:U5KlQbBliXUxR0rHf93WhlA6tj+
- TLSH
  T1D7B63846B2BB0DC1FAFBAE70D8F463679127BD05AE71814906042F3B5C772E087617A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral20
- Target
  valorant_unlocker/backup/input.settings
- Size 88KB
- SHA256 813dc740fabe35bf5983e550795e9bfa40b888f0b44b16a4da1c841d2e3dd829
- MD5 74061757bd00a6d226a397e5d78fe563
- SHA1 22afc0173308d7cbe8c6d9018a8edeeaec9d1f11
- SHA512 94cfe4046a40a973483a933f7208027c77d663bd9f26f56d97bd71737630f4dacc974feadde7c1281dffe065618185a8eae4d1084660bf0ab1867ecc06f91d94
- SSDEEP 768:YOSy9FYMHg/aqTuIFJ+IWga+Fs8aaxGpFSDYr+Q8vNSD7DlbQbLma+Fsr4rp:x
- TLSH
  T1EE93DD953054F002ED0F2AA751E726D1F43E215F203859A691D0BE8B0FFB36995AB37E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21
- Target
  valorant_unlocker/backup/profile.settings
- Size 117B
- SHA256 6a18cfb1331a7f8f02c0381108f81b4748583cfad87d7affb7497dfb416a9a43
- MD5 e84d207c7f33dece0f1f320fd9ba9851
- SHA1 e06b62d9d9600d14b00adc418b01610a0edc3941
- SHA512 2b9b54416b3ebec37b918d63461020743efb249f2d88e14990a7b5c1932b00bffe9dc9296a69830bf560e9ec1c5d178b60b570f5ee82c2e68c72867a1c5fbe38
- TLSH
  T12BB0127F40A374A792FD6672B556D2C5E505873478285E3CCEE3629351C2E0B2ABD304
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral22
- Target
  valorant_unlocker/config.json
- Size 108B
- SHA256 6d5dfe1bd451e5a4ca6bfab5acd971a82e5b63cd20c34e717cfb82f6e0fb8a72
- MD5 0076c7c2208691fe389178cdc9e6b6c8
- SHA1 5db45f589825676f3600fe98c45ddeffab068932
- SHA512 1a922b200b0752b75e2b9819e74d790c97174e2fc69ea935c8194c7dd2348c00c01b513e1b6c597e75fff8a42353e8c02b945bed7786c339ba7f245dedd11ae6
- TLSH
  T14CB012AF40A37877926D92720557C349D50587346418593CCEE3A6A35182A0F266D304
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral23
- Target
  valorant_unlocker/license.txt
- Size 44B
- SHA256 d44f3c879aedca2ad2d3192fc83f1b74eceeea0e53fb8cf6feaab9357fab06ef
- MD5 90027bba1c699c17830aee7cc9d5e5b5
- SHA1 a1ab14c48072f086afd41608543fb92615188c42
- SHA512 9d592f6c5a5de3dd7c4774a96b64efb9c42a66bc52e8ef837d10cea7cdbdbbb11fcab91109cfc073baa19390576c0e41a449afe4430b83cbddf19624b281c23a
- MD5 SHA1 SHA512
Score

3^/10

ransomware
behavioral24
- Target
  valorant_unlocker/logs/manual/Manual.txt
- Size 340B
- SHA256 f6ee0b021cbbf506038748f6ba70a7d3b333c2d74590c577e46c9cf570cd91dd
- MD5 441ad07fac6332829dc369f52e95e866
- SHA1 fca8d3fadb75ab51872f58e50518669c7c036b4c
- SHA512 5290ece2ddc8c4da312499a1b02d9300f31fd47d387bfdc895b6f1b6ee2faabd8c676945423a22ddfe135a18f5a4461d3d3b817b04986c30df97558fc0b2f290
- TLSH
  T11BE07D7FBE8653F3041500A1A23FB3D2F31AC49E922B0381547E011D1335A42C2A3CE1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

ransomware
behavioral25
- Target
  valorant_unlocker/logs/settings/cef_100_percent.pak
- Size 261KB
- SHA256 62d84df6c05bc41086aef1caff5b2db9cacd18535cb64407e79b715baa316b17
- MD5 b84d20e51dc7b971c7ab2502e3843f1f
- SHA1 ed87bd499cae74a748e03fc33c36476a20487b78
- SHA512 1dcf7ff2cd92708892a43fb6cb9df5b46c1f98c49b7f58dc915b31dcaa27323d9055754173005b16581e74add695b62fa096890a40e3a2ee42ddb11a785920d5
- SSDEEP 6144:FIYS+PehTgH+a6S9zwV5TrOHCZ3x5c1YC7x10fSucY7OP2ITQ:FIGeb1Ngf1d/dQ
- TLSH
  T17D44F1E3B3B4BC3ED65A1A73B1910B37D97B413906930349C28686B57D56B80EACD34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral26
- Target
  valorant_unlocker/logs/settings/cef_200_percent.pak
- Size 412KB
- SHA256 ca0242f452e96e89a85e5a718e9ab01e24ea955b8491f6da9b1ebb5b3b4b7c71
- MD5 d344d778833b313ed4afecdb90f4cad0
- SHA1 acb1f69b2f0a69d301e6816c5d886f1c10a1bdd9
- SHA512 e5d32aba64613a9e8ec4aabb50b088f06ad83e2341f9bb22bb541e29deb63027dc07295c53eab8934387dcdb7c93aa7264dd77deba0a0bc9ed9514c5fb6b8b0b
- SSDEEP 6144:CYS+PehTgH+a6SuDQYak+9bQHgs4jTlyOHCZLz73QYV85u/oFYvwoytKi6obByPv:CGebIfz4gs4jTEg5u/oFFpxLlFYZ
- TLSH
  T1DD9402E6F3F8AC39D9630A3352520A73DD77143506B7034AC28A9D397D96B9489CD38B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral27
- Target
  valorant_unlocker/logs/settings/dx12user.settings
- Size 6KB
- SHA256 514395c31a4591b0dc85aac048c079d90620abadcf768bfd255e10190bcb92f6
- MD5 3635632d49c0b3c6a2f805e0cd64670e
- SHA1 1c0b36ecc0326a3807f7a91ed274451cbec18ce7
- SHA512 3a1428c7d3dff3c292caffb727f48ed553eb3e2a3724731f3eac6e7dba20ae60790c20d00ab7cd7568967fda8a46eb3c152610312c6f05feb714311c5b215648
- SSDEEP 192:K6uV8NXlf96S677KeXx8igzaIhe6E+a/kbLUWoApzec2cfBq2fIx/CGy+2l72HlF:K6NctBhgzaIhe6E+a/kbLUWoApSc2Kd6
- TLSH
  T179D15491DA593A7C2C97E07CDCD2768306932F85B0ABA8F4B34518AD7F44C601AD9D1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral28
- Target
  valorant_unlocker/logs/settings/dx12user.settings.bak
- Size 5KB
- SHA256 3be39694d0b1d90ab350c461a6b4457f0f2faacaee61774e671000144f690cb7
- MD5 23daaa20f1b560b2e90be16f70ca3da2
- SHA1 5dfe9246a5b735b40da07dd75e62d6d76f1b2608
- SHA512 82088290dd19d74a00625048b912ef36e69b81d3daf8cb3e90415d777d6fc1e4e15b5904bfb7cbd96f230fd74b5c0af2ff6b3b8505c46208e04d09c84e2d7796
- SSDEEP 96:FN6uV8NXlK196S67g6KeXxh6igzaIhe6E+a/kbLUWodupzec2LF12FEb/Xq7q2fM:76uV8NXlc96S677KeXx8igzaIhe6E+aJ
- TLSH
  T1C0C144519A5A797C2C87E078CCE2768702932E86B0ABA4F4B34419AD7F44C602AD9D1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29
- Target
  valorant_unlocker/logs/settings/icudtl.dat
- Size 10.0MB
- SHA256 27993e2079711d5f0f04a72f48fee88b269604c8e3fbdf50a7f7bb3f5bfc8d8e
- MD5 9732e28c054db1e042cd306a7bc9227a
- SHA1 6bab2e77925515888808c1ef729c5bb1323100dd
- SHA512 3eb67ab896a56dab4a2d6eea98f251affd6864c5f5b24f22b61b6acc1df4460d86f0a448f1983aac019e79ff930286c3510891be9d48ef07a93ff975a0e55335
- SSDEEP 196608:Ub+wSv9AAQbNjliXUxR0rHf93WhlA6tj1w:U5KlQbBliXUxR0rHf93WhlA6tj+
- TLSH
  T1D7B63846B2BB0DC1FAFBAE70D8F463679127BD05AE71814906042F3B5C772E087617A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral30
- Target
  valorant_unlocker/logs/settings/input.settings
- Size 88KB
- SHA256 813dc740fabe35bf5983e550795e9bfa40b888f0b44b16a4da1c841d2e3dd829
- MD5 74061757bd00a6d226a397e5d78fe563
- SHA1 22afc0173308d7cbe8c6d9018a8edeeaec9d1f11
- SHA512 94cfe4046a40a973483a933f7208027c77d663bd9f26f56d97bd71737630f4dacc974feadde7c1281dffe065618185a8eae4d1084660bf0ab1867ecc06f91d94
- SSDEEP 768:YOSy9FYMHg/aqTuIFJ+IWga+Fs8aaxGpFSDYr+Q8vNSD7DlbQbLma+Fsr4rp:x
- TLSH
  T1EE93DD953054F002ED0F2AA751E726D1F43E215F203859A691D0BE8B0FFB36995AB37E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral31
- Target
  valorant_unlocker/logs/settings/profile.settings
- Size 102B
- SHA256 a095c83dfcd9371e7aaee0561357199eaefd8b65111b694aa940d84ef42bd508
- MD5 fca8f5239fc34cdec1b818187c45677e
- SHA1 90928f3d1cca0586c1521e342deed9f0e66632c9
- SHA512 ec212239d71e8c5623bb3acc97aea09831d7bc668c526504c046bb38d90988a3a0789d50cf0a11d9f415f4cbc9f5ca29e4be6dbc2bcb8d95c95b18e52b4cd9c3
- TLSH
  T1A0B0126F40A37467926D52720556C245D50587345418593CCEE362935182A0B256D300
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Loads dropped DLL

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32