Resubmissions

04-02-2024 07:10

240204-hzlcvacbb9 10

General

  • Target

    Fortnite_v2.7.exe

  • Size

    20.6MB

  • Sample

    240204-hzlcvacbb9

  • MD5

    bea5534a5c5471994f5972e7c9d27e58

  • SHA1

    c4ee984674d86208b9d67dee4e95c8105969931a

  • SHA256

    ca365cb41707416bdbb3410a3e17e22da5adf132d3384fe79e3c7eb9cacc4b04

  • SHA512

    8a3022b86f386ca443665bf66aac855893576b78badaf8cae2dc1813b68b869ab1ddef1621066613b96ec0874d0ca49d09ad47a3646693858bfe1b7fa4915bfe

  • SSDEEP

    393216:pqPnLFXlrlSeqzbQpDOETgsvfGa3KghRkyK8vE4fdvkiOEm:gPLFXNhabQoEG6eHVy6

Malware Config

Targets

    • Target

      Fortnite_v2.7.exe

    • Size

      20.6MB

    • MD5

      bea5534a5c5471994f5972e7c9d27e58

    • SHA1

      c4ee984674d86208b9d67dee4e95c8105969931a

    • SHA256

      ca365cb41707416bdbb3410a3e17e22da5adf132d3384fe79e3c7eb9cacc4b04

    • SHA512

      8a3022b86f386ca443665bf66aac855893576b78badaf8cae2dc1813b68b869ab1ddef1621066613b96ec0874d0ca49d09ad47a3646693858bfe1b7fa4915bfe

    • SSDEEP

      393216:pqPnLFXlrlSeqzbQpDOETgsvfGa3KghRkyK8vE4fdvkiOEm:gPLFXNhabQoEG6eHVy6

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks