General
- Target valorant pack.rar
- Size 28.9MB
- Sample261023-162yaagv2j
- SHA256 b998aa5d876a4b7d131ac937891e64727bad6bfb51583fb8a5706dbf962b6cfc
Score
8/10
Malware Config
Targets
-
- Target valorant pack.rar
- Size 28.9MB
- SHA256 b998aa5d876a4b7d131ac937891e64727bad6bfb51583fb8a5706dbf962b6cfc
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
Executes dropped EXE
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
Uses WMI to collect hardware manufacturer information
Uses WMI to read the system manufacturer, model, baseboard or display adapter, which is often used to detect virtual machines and evade sandboxes.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1Windows Management Instrumentation
1