General
-
Target
Fortnite 7.4 External.exe
-
Size
907KB
-
Sample
240419-myf4ysab7t
-
MD5
edaaef657fc71e16e744b23aab380205
-
SHA1
ceddd2c4a6a2d9cd92ec8e0097a26ca8e2e720b1
-
SHA256
2b4a250b8d29b287eab85ff478cfaa4ae2273775d8f49cb51bb0cdf1552f56d4
-
SHA512
35c9a07d2b4886e01d1f10e9fd7057b228a9c73535f342c2f750d82629e9a89f2ef7b80f5f0e0d4e0ca71d26abeca31cd1b115435247d9067f8a634750b876b6
-
SSDEEP
24576:EIVQylKjvqqkpW6RTtvsB4PRFK+Oceyn6vbJJH8:bohkpxRRvVZFK+Oc1nkbJR
Static task
static1
Behavioral task
behavioral1
Sample
Fortnite 7.4 External.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Fortnite 7.4 External.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
C:\Users\Admin\Desktop\@Please_Read_Me@.txt
wannacry
13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94
Targets
-
-
Target
Fortnite 7.4 External.exe
-
Size
907KB
-
MD5
edaaef657fc71e16e744b23aab380205
-
SHA1
ceddd2c4a6a2d9cd92ec8e0097a26ca8e2e720b1
-
SHA256
2b4a250b8d29b287eab85ff478cfaa4ae2273775d8f49cb51bb0cdf1552f56d4
-
SHA512
35c9a07d2b4886e01d1f10e9fd7057b228a9c73535f342c2f750d82629e9a89f2ef7b80f5f0e0d4e0ca71d26abeca31cd1b115435247d9067f8a634750b876b6
-
SSDEEP
24576:EIVQylKjvqqkpW6RTtvsB4PRFK+Oceyn6vbJJH8:bohkpxRRvVZFK+Oc1nkbJR
-
Suspicious use of NtCreateProcessExOtherParentProcess
-
Downloads MZ/PE file
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Adds Run key to start application
-
Legitimate hosting services abused for malware hosting/C2
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-
Sets desktop wallpaper using registry
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Pre-OS Boot
1Bootkit
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Indicator Removal
1File Deletion
1File and Directory Permissions Modification
1Modify Registry
4Pre-OS Boot
1Bootkit
1Hide Artifacts
1Hidden Files and Directories
1