5da769bca0e10cced59d85965ae6ee3c66a6443680f390095b655e7862e032a1 | Triage™

Login
Reports

Overview

overview

Static

static

UPDATE.bat

windows10-2004-x64

8

UPDATE.bat

windows11-ltsc_2024-x64

8

backend/agents.py

windows10-2004-x64

3

backend/agents.py

windows11-ltsc_2024-x64

3

backend/app.py

windows10-2004-x64

3

backend/app.py

windows11-ltsc_2024-x64

3

backend/di...nce.py

windows10-2004-x64

3

backend/di...nce.py

windows11-ltsc_2024-x64

3

backend/en...log.py

windows10-2004-x64

3

backend/en...log.py

windows11-ltsc_2024-x64

3

backend/history.py

windows10-2004-x64

3

backend/history.py

windows11-ltsc_2024-x64

3

backend/in...ker.py

windows10-2004-x64

3

backend/in...ker.py

windows11-ltsc_2024-x64

3

backend/inventory.py

windows10-2004-x64

3

backend/inventory.py

windows11-ltsc_2024-x64

3

backend/live_match.py

windows10-2004-x64

3

backend/live_match.py

windows11-ltsc_2024-x64

3

backend/match_meta.py

windows10-2004-x64

3

backend/match_meta.py

windows11-ltsc_2024-x64

3

backend/of...nch.py

windows10-2004-x64

3

backend/of...nch.py

windows11-ltsc_2024-x64

3

backend/pa...tor.py

windows10-2004-x64

3

backend/pa...tor.py

windows11-ltsc_2024-x64

3

backend/pi...sor.py

windows10-2004-x64

3

backend/pi...sor.py

windows11-ltsc_2024-x64

3

backend/re...bly.py

windows10-2004-x64

3

backend/re...bly.py

windows11-ltsc_2024-x64

3

backend/ri...ent.py

windows10-2004-x64

3

backend/ri...ent.py

windows11-ltsc_2024-x64

3

backend/sa...ata.py

windows10-2004-x64

3

backend/sa...ata.py

windows11-ltsc_2024-x64

3

Resubmissions

02/11/2026, 20:22

261102-y5rd2swza110

02/11/2026, 20:20

261102-y4ec4ac13v10

Sharing

Copy URL Twitter E-mail

General

Target
valorant-scout-v2.3.1.zip
Size 1.5MB
Sample261102-y4ec4ac13v
SHA256 5da769bca0e10cced59d85965ae6ee3c66a6443680f390095b655e7862e032a1
MD5 bf5dff11b26a20c375d2f96f517c253a
SHA1 5a6eccea1def83bbaf18faa48c0da4c0a2af22b8
SHA512 b352fe4c3981b33ee1873959d3fc6b9d1a7714145f23d4d072bdfe9ce7f86d1ba12f8c14573669af6cd8c8a2d17113fae5226d6106707a997a8d44649afc6795
SSDEEP 24576:YwofpQH+chnHica7VFr0rM+bdTfLeIQ3mQ9eop9QeRBJaC1p+bnduU+ZKUstmm4/:AhgnH8VqndTf+mz4ZonRYKBmd8MBR
TLSH
T162653379C1C8A6B3CA355136DC12071E9395137B1A36CA0A1139EE881D36BD63F5CEEE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

execution

Static task

static1

Behavioral task

behavioral1

Sample

UPDATE.bat

Resource

win10v2004-20260911-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

UPDATE.bat

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

Behavioral task

behavioral3

Sample

backend/agents.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral4

Sample

backend/agents.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

backend/app.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

backend/app.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

backend/discord_presence.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

backend/discord_presence.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

backend/encounter_log.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

backend/encounter_log.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

backend/history.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

backend/history.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

backend/instalock_worker.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

backend/instalock_worker.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

backend/inventory.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

backend/inventory.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

backend/live_match.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

backend/live_match.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

backend/match_meta.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

backend/match_meta.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

backend/offline_launch.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

backend/offline_launch.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

backend/party_detector.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

backend/party_detector.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

backend/pick_advisor.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

backend/pick_advisor.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

backend/remote_ably.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

backend/remote_ably.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

backend/riot_client.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

backend/riot_client.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

backend/sample_data.py

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

backend/sample_data.py

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Extracted

Language

ps1

Source

URLs

exe.dropper
https://valorantscout.com

Targets

- Target
  UPDATE.bat
- Size 147B
- SHA256 f52cef2e8e3b427c6c402127d11e35d3518323a6f73e021cb803167c002037c7
- MD5 5685277e5465b13d1633d3408824865e
- SHA1 ba37522b74eaf447f46558f0d4e956fe65e2b0e2
- SHA512 5092c43ec91630a1fca076e6b316500af02c6f8882409b7467a605004d1ec650d93da0c72f748f8886f870ca97d864ee7b44c9d15273e04d0124ef86b91290de
- TLSH
  T11AC08C112A55C73816A3DC2602E4C9B25C68131ED111EA82B0722228B80C388D8881E9
- MD5 SHA1 SHA512 TLSH
Score

8^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
behavioral1 behavioral2
- Target
  backend/agents.py
- Size 3KB
- SHA256 04c1b85c018dc76a839dd3c8f7e2d7843a2d2ca38c9b89d44ea17359437b098a
- MD5 bbf96307e92717d17f49a6707652695b
- SHA1 01f54daa60c323f1c91a11789dff93a38ed784bc
- SHA512 1523ba6157784b651c55eba09d450a2c1028105951d6fa5d717de51db3b05f38ebd08c4455fc81b0183dbac2b4a3ac84cbc134e000f71414441b531edb21871d
- TLSH
  T1F6717211D6004C27A7AFB921598FD8063E20A36F0E0C7C6E758DA59C5F1E62DC1B4BE6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral3 behavioral4
- Target
  backend/app.py
- Size 36KB
- SHA256 458255961d90463aef0b07de600445f6588390a182f6d0cd298bf1404d37cc67
- MD5 4e95bb6bd74a9f657617259869c3688c
- SHA1 45c0c5dc50b7e17c7873b82a8c41797b17e2bcc4
- SHA512 00bfe1d4b10d7d36efd3a3d8d078de39cf4dc188ad32bc63f3a284f16a1678a6d8d6d74d3e5cd8ef9028aad29174df8fbc28c35040230a71b5da9c6711151e57
- SSDEEP 768:EgkFzmhs9Gy4w8HF8p8+GHAu09hoR8vf+4PWMvpY:EgkFozyKHFI5VkevRY
- TLSH
  T191F29366985D6433D763D11C2CA5D1267636BC536A082038FDECA32C3F5D13BE2B96E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  backend/discord_presence.py
- Size 8KB
- SHA256 101b921df510742fa98531bb12e353292e266df9d72491727ebb31525f2a2ae3
- MD5 54d86c8c132ce62bd06eb764ff578833
- SHA1 90c8da939d7da9f511c114c9fc20f6bcd5829bd2
- SHA512 c5cb44d3f4f0e46744b70a54cbe9d7db6e510d8170e69ce7a4c45a3715764f6c848865424b761089fa67d995adca03f754106d05e936c5bfa62d55d7e7a4ce60
- SSDEEP 192:KLVN1qGuE8mAqg8cmwkDHMmvyT7rglSfwrvMyU:i0E8ywkburPfwrvMj
- TLSH
  T1F8023530585998A7CB0394688C9BD203276978575E4C30347E6C836C5F6CE33E1BBEEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  backend/encounter_log.py
- Size 18KB
- SHA256 feba0a1f279361ca941889387ed66cb1b0cdfbf30d79a82660fc1e5cb58ac32a
- MD5 da764079b7324b9370a38ead35219513
- SHA1 1bfa4ed4d555967d702285aa12d6bbd265271eb5
- SHA512 87423804b6016bd947ca18a1122b567bb4fe474e9cd5802cb7c574aadb851bc429566cd8c1f3eb32bcc009778d369d08616579375146d51085ed19d8e58a91fa
- SSDEEP 192:thDsIlDlWKrNEcr77mC8O8VH03fGjaT+VlvJaBdjSbaNdomcB712rCs6yRs+tK2A:fDsIlDlDNEE7kYvge+VAWIdOGsr9j2po
- TLSH
  T14B8264B7583D4332D397673C3989D1117B1A681746423428FF9D03A8AF2D93751F9AE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  backend/history.py
- Size 25KB
- SHA256 f0b21462b3393e9e93c8ac7724a3b378e89963a15a978ca04f69f6d5fec16e2b
- MD5 4e60c7b3ac8f8e86758cfafd7ed2305c
- SHA1 6186a8e1b7be9c66be7beb24c836bb4f88535ae1
- SHA512 f51ea400415123ff2117bc240c642d5ac9c6e64a942dd52585cad8469a9e6eb5584f5d2e57a1de53870668767727987296f10ef3bb83456d595ffc29535bbd51
- SSDEEP 384:1bltkkq6SlDlCj6MPR9poS0F3aUTpwuDNxtAp8DWPg27DjJSRe3iNzeA9:hBShEjjZ9+SwaTWiPg2fjQCiNzeA9
- TLSH
  T10EC2A5764C281873DB6668243D5AD242772AB9632A40306CBDDC535C1F3E83BC7F46E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  backend/instalock_worker.py
- Size 7KB
- SHA256 9ffb45c70c584df13148e01c7bfcf23bfb76c4c0313f713891137de09655403d
- MD5 cea16fa37605865a8acd2d9fd21f36e3
- SHA1 8140958976be8ecf76d695ce5ef1c706427ed48c
- SHA512 ca9fcb86daf638010f8a0630bd8694f18149c61db7cf022ec51cf292717c74f50f008812128623e962958df8ca516e463cf4db3571b91acfa411a7db1d095859
- SSDEEP 192:kNdja+l6sBaYQpjBQt3sYQtEPMI3XOwNM:OdWK9Qpet3svEUEQ
- TLSH
  T1FDF1346455692C72C3D38929EDAAE01277BB5893590D3024F9EC93642F5C13AD1F8DF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  backend/inventory.py
- Size 6KB
- SHA256 3a1a65972985292af9ec57c5d20b402544e61dfe85fff360f7d839b4d9d0b224
- MD5 33d508ac2fcbf28f533997938bec0577
- SHA1 e772a3f4f13c6c09ac676543f4f92f83f7461c04
- SHA512 84b53983e91b6f3bd02dc6067878ff8181bda030bab695e8a8ad70e45b53c7a079436c155384cdd50be6ae27b9c7697859a07c635878f72bbdcdbb6d1d2bf02c
- SSDEEP 192:6WOADgADn4+z+/h2FzpBF179h+gQny98QWFw/RJda8AWlra8dzTv:6Ueh2FNjhf1d/trqiTv
- TLSH
  T1E1D1B535E9545792E3827568581AE21173B8FD034A04B5287FEC135C3F2EA2F91FB69C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  backend/live_match.py
- Size 65KB
- SHA256 75c8dd95d7ec426e08bbc66b1721dce9feacf57c38142dfde1198e8f76886df7
- MD5 65a2cdfa7c12b872eb08d8e5d04161db
- SHA1 f65e60a3cc05196b4aa3ad8483be2730c60f956a
- SHA512 83520c0730b89ba23daf935ec09f729914745866e14335a7758493db001e24b5b3df2b2364168f04316f8720a87aff011254febee73f28a69ff3e6ad62852af4
- SSDEEP 768:g0FTgl93eaawvAzs1+k7bTMjwUOIaqFXkTs+94kZTh2YZ3UWRDUI3wF:geEJ+k7/j1qFe94whUWRDJ36
- TLSH
  T13563A371885E15269393657C4DEAD5137B29A8135A093108BDEC67BC3F2C83BD2F8ED8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  backend/match_meta.py
- Size 2KB
- SHA256 21eb3e57115799b4c1b49924eaf007b365e278377e17e917af6b44913972b490
- MD5 45eb1fb34d00e78165985d422f24e39d
- SHA1 0eb12b905bb4fb34c31caef0d26d1dae9f2097fe
- SHA512 c01837dd4773e7e67f670c5ed4fc36c9345756b84e730710d1c99695c18fe0bd9dd2a6189ae89fb5d105b5a917dc7540a4b804ccf7667d96ee92604112d0e7ca
- TLSH
  T1DC516379AD516933D250E6380978D251A73BBE937B206078FDCC9324DF2C83681B52F9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  backend/offline_launch.py
- Size 48KB
- SHA256 8efa8ac64db40360e5878fefb21f077b74f7cbf41662daf4aa122d52390f39fc
- MD5 85db6731de8874a9b9b2f3901a96f877
- SHA1 362f3d04c96345ca31bb0129e20f178a370b9866
- SHA512 8ab43aa1ae2bb4709c2b60e4eeee2efea799d115657d85d252d70ef664aaa1ebfb93706910b89bbb79b22c97c3fd105b80c085c1d29c54cc0b270be2c6e77e28
- SSDEEP 768:oKFHpWmOrDvCcMNWRPYkj3VCK3D4punZBFRulBghvqFQHzh+lSQ4ZBo:oepWmeDacTukz3DbnrvulBmQ4g
- TLSH
  T11023C710D89A6822C793D53D8863E11327267D431A0D2834BAEC926C2F5D57DD1B6FFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  backend/party_detector.py
- Size 2KB
- SHA256 e50d4662085c696cd39d021f92038e6989a2259d9c3c76902dcb20eec9cba8df
- MD5 a7a5401a0b1bc643d82d9782322662bb
- SHA1 1154ea115d88dc8d121dc835c60e3f32f60d66cb
- SHA512 9bd9ab910c9c25228e5e45abf9b29bfc15acd60b78f7fdf56e29a8187645bd1d53d9d6552f201c6278571347871ec848483b168b50e7e584161972dfe47df8be
- TLSH
  T16C41CCB5793E0520A3C7A1A8295A55217F63D53F1D3A39207A9C135C6F3B83EB27C80D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  backend/pick_advisor.py
- Size 2KB
- SHA256 98cf7ba99a18254f17ae2399ad00d37d0cd139f4262346e3ab5937a410781ffa
- MD5 3fe802dbe1abbf0c85e7a6905e77c16e
- SHA1 23f5ce669c60902aacbecf2dfa705c4e9bc860a3
- SHA512 a4e9746c7353e7ba5ac0a55043d384fa7f088c27ca1944afaba8580171dc4d4c7b2430761616a750415ccdaec5cbf90f7292b010f09d60b1c3fe60a1f787fa8a
- TLSH
  T1DB51AB15C8A50D739BD7B6367C5FA1B6332012174D04384939EC5BACEF29136E4746E6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  backend/remote_ably.py
- Size 12KB
- SHA256 dfb1d37a895dba4d1f5858901e73fcc3b545e30dc455cc35fe36fadc5caa69c4
- MD5 957f20815199e23f161a33a647a45a36
- SHA1 25bdf910d3cd8a638616cf99ddbdafc9b0e9b757
- SHA512 90237112762ce2e8841495f2b6946109e66b48b856e130ae36fa00480e264b4ce0728e3ab6bb2e7638a13eb10d1a5ce628fbbc3d24944d4e42843c2e6127bf47
- SSDEEP 192:reTkSOrVbDfISDq6MDfxnx/+HNjJnFvPpYV/OG6LGimOyIHG7MQHGdd:rIknFIBtxA1Ppc/pN1Im7M5P
- TLSH
  T101424424A62E1933C693D49A5876E0021337F94329081139BDFCA36D2F4D976C6E9FDD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  backend/riot_client.py
- Size 34KB
- SHA256 4dc593766901cb653eb0d76b574db9b032040797e504e72b78a1dc8189ead3db
- MD5 32c2ac3dc00610de757913cc4be64b19
- SHA1 70366933adf055216c5e2aeb77e873050282fa9a
- SHA512 bf51d21583cdf35dcdac66c051ce0e4c04dc664aca8592edb674be745c12f600cb3d4a891f0737ab022bdde5c6b91c273684fd14a7083ff3cafa51e500ecbe16
- SSDEEP 384:V7+Tb6QJTDNfqcVBRHc/86th+pwEVQT2mEWokQBhhnZHUtQJu3ZbyvQWl7UpkIgO:VydbfqcVBheRwpwEVQTtZrohBZKQ+uQ
- TLSH
  T117F275B5948E5873C393D1189C55E1027B2AAC532A0C3524FDEC926C3F6893ED2F9ED9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  backend/sample_data.py
- Size 4KB
- SHA256 574e455a30c64521a83f3d8649fb67a79c72ce6ce11c00098ba2634d9d777d02
- MD5 4292478e49eba39d2ff5ebfc86d8e264
- SHA1 be9e14aaaa7cb11be54e52fd9fc8e9da16f6bee7
- SHA512 7cf595fd33ad61205fe822e974f626e424655acea954e3ccc5570197e66534bbae172685dab1abbc89f92d7dfe343a21abbf55299feb971fb969dcbda55e2c99
- SSDEEP 48:P7etgUEbs+83ZCMCAa5ddt4utiZXFwbHnY1fWKzKjcVKoHRMRG6spDrNK/K/cKti:zj3wdpDCJTnbHn++FY6s5rIyH8MW
- TLSH
  T105914126C8E12C6B27D3D1AA68EE1147AB39E5230E082654F75E493C5F2D82CB0F0E71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy