Extracted

• • Target
    ValorantAllSkins.exe
  • Size 101KB
  • SHA256 870ae7f07a8c420297fc47cddcc7b15c71be858e9e72075adc38c71cf4fe004d
  • MD5 13fc5d823ee54da7363027f563ce1455
  • SHA1 dcfe082eb3cc8032f59761cdda1fe05c4b5c359c
  • SHA512 62fb4f01106e2fbfd65395111d8c64b0b692e033e6dfe439098ee9a4071aab92f7d0a206e6ec85041fdddb3ff34cd7fbc3a3343545b81d59d4d91f75913b7cb8
  • SSDEEP 3072:Z4zWc/G5JBUwvj8SP0JxETiORWCxVH1UAHKy9dGxgXBG1:CNe5qJGTJ4sOjyFY1
  • TLSH
    T110A36D28A36C9A15DBFD4674B7B0122507F0E28B6092EB4BCDD1B4CB2E667C17905DF2
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  @shidoaritakatdiscoveryredlinesectopratinfostealerrattrojan

  • Family: RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Family: SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • RedLine payload

  • SectopRAT payload

  behavioral1behavioral2
• • Target
    ddl/Cl.dll
  • Size 173KB
  • SHA256 99f39f461ce64241f68d1659026bf2987932a2c69bed5f21183af2994034fb08
  • MD5 cbeffb78959bb360a31dd47efa32c683
  • SHA1 b9a70166d633c24b6bdc18805353d1d42208f9c0
  • SHA512 1066817aa143f6195d5ede54acf7dd054789de535627b40d5c3613f1df370dae06ff5634816ff584cc7a8cfcb622ea085a9a4f1debf2ff86735ad45fe38b2c6a
  • SSDEEP 3072:g4dI2g9Vjwi81BlyQ1tK5C6QFs6h37Tbrznl30MvzYzojtGNUOnKZTJDS9ym9:zmt9l813y36h3brzzzYziGNUOnKZTpK
  • TLSH
    T14D047C4B776840A7E5739A7889A38942E772B8421B2097DF0370837E1FA37D06E3D765
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral3behavioral4
• • Target
    ddl/Intel_OpenCL_ICD64.dll
  • Size 141KB
  • SHA256 0f620168802e531648fbe548896589262e0823037b856daeafdf9ddd72902193
  • MD5 c036b46f14657d0af82b89ec669c4767
  • SHA1 98b29772da79c82e85576a88f84918efc6a03153
  • SHA512 94a94385e83036e00cefbb488d4c3b709ff3f20444295a41f4710213e2bbf2b117285e59530cee3f7739abfae24144a2a18f1c9024b4bcaa4517fc2dbed8c933
  • SSDEEP 3072:zUVl80+2x6eBhyxmpps4vObbN4JHCUmOnKZT0C9zEfK/jOD:zUfPyxmppzvA2HwOnKZTz9zEFD
  • TLSH
    T1FEE35C47A66400E7D9F74374C6135902EB71788607628BDF02B5939A2F13BC6AE3EF25
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral5
• • Target
    ddl/amdocl64.dll
  • Size 15.4MB
  • SHA256 6a201b2ca760f937c2da5aa147278459efc689e62a2ab622098e6d3d639b0d85
  • MD5 efdc488cb1540f5d7e2f2eb7b4435961
  • SHA1 b1705255e498a3e0e6d625fb3879877c66e0bc15
  • SHA512 8d9e2e7922fd20042193acc7dd2b1c6d1eb9939a850ece06b3cd1822cc44e0920df406fa7144fdff88c2c5e39135f8a85dcdea308698e24562a2cbc3171e0f1d
  • SSDEEP 393216:3F3Bf5480fCPE4vsKOfS9C0x7m4vbRJYZnCrRox9SAIF6OWI3ibW:3MEE4vsKOK9C0x7m4vbRJYZnCRox91Ug
  • TLSH
    T1F2F68C1AE76800A1C01BD23ECA57B617D7B1309197F09FDB225A8B56AF23BF25439335
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral6behavioral7