General

  • Target

    FPE-AlphaV2.zip

  • Size

    418.1MB

  • MD5

    5620cb39fb318b68e3fc92dc4a515069

  • SHA1

    64c614d1038c62dc7ea7ae9f80c353966454452b

  • SHA256

    dc28ff70b24393a3bf2bb7a6dee7e382700a63ce9ceb521d3f371b57351c0500

  • SHA512

    36a087a71589ab94e3e941bf64629651a9317d3b592ad80fc031ee043a4f915d4125af546eae54827225be73e78dda6ad91e022f4354e563971faedca5744757

  • SSDEEP

    12582912:Pfjbrogq4aoMW0+9zDFSac5RcNkv1tFQ7zTZg9Uceu6:Pfjbrogq4LMNv5wkvsTZgyS6

Score
10/10

Malware Config

Signatures

  • Privateloader family
  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • FPE-AlphaV2.zip
    .zip
  • FPE-AlphaV2/Windows/Engine/Binaries/ThirdParty/DbgHelp/dbghelp.dll
    .dll windows:10 windows x64 arch:x64

    a85654ad1c6f02f9037c7fb457c5ed50


    Headers

    Imports

    Exports

    Sections

  • FPE-AlphaV2/Windows/Engine/Binaries/ThirdParty/MsQuic/v220/win64/msquic.dll
    .dll windows:6 windows x64 arch:x64

    8ed6b48c4ed6aedb3c082252b3ad5662


    Headers

    Imports

    Exports

    Sections

  • FPE-AlphaV2/Windows/Engine/Binaries/ThirdParty/NVIDIA/NVaftermath/Win64/GFSDK_Aftermath_Lib.x64.dll
    .dll windows:6 windows x64 arch:x64

    f6444cd8b00f7b259ecc779ee4740ff5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • FPE-AlphaV2/Windows/Engine/Binaries/ThirdParty/Ogg/Win64/VS2015/libogg_64.dll
    .dll windows:6 windows x64 arch:x64

    3c3debc2ef7563148ac298f37a8145f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • FPE-AlphaV2/Windows/Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbis_64.dll
    .dll windows:6 windows x64 arch:x64

    bb8beedbff4e95bc2364cca7408a6c49


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • FPE-AlphaV2/Windows/Engine/Binaries/ThirdParty/Vorbis/Win64/VS2015/libvorbisfile_64.dll
    .dll windows:6 windows x64 arch:x64

    b12af25010b95ce995fb040ce984ef7f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • FPE-AlphaV2/Windows/Engine/Binaries/ThirdParty/Windows/WinPixEventRuntime/x64/WinPixEventRuntime.dll
    .dll windows:10 windows x64 arch:x64

    c5963354b88bfc6f96a5cbbd4f5ceb3c


    Headers

    Imports

    Exports

    Sections

  • FPE-AlphaV2/Windows/Engine/Binaries/ThirdParty/Windows/XAudio2_9/x64/xaudio2_9redist.dll
    .dll windows:6 windows x64 arch:x64

    f336e160482c81972d16c5670e93a480


    Headers

    Imports

    Exports

    Sections

  • FPE-AlphaV2/Windows/Engine/Content/Slate/Cursor/invisible.cur
  • FPE-AlphaV2/Windows/Engine/Content/SlateDebug/Fonts/LastResort.tps
  • FPE-AlphaV2/Windows/Engine/Content/SlateDebug/Fonts/LastResort.ttf
  • FPE-AlphaV2/Windows/Engine/Extras/GPUDumpViewer/GPUDumpViewer.html
    .js
  • FPE-AlphaV2/Windows/Engine/Extras/GPUDumpViewer/OpenGPUDumpViewer.bat
    .bat .vbs
  • FPE-AlphaV2/Windows/Engine/Extras/GPUDumpViewer/OpenGPUDumpViewer.sh
    .sh linux
  • FPE-AlphaV2/Windows/Engine/Extras/Redist/en-us/UEPrereqSetup_x64.exe
    .exe windows:5 windows x86 arch:x86

    67715e556e3a78ea78c756db800102a3


    Headers

    Imports

    Sections

  • FPE-AlphaV2/Windows/FangameTale.exe
    .exe windows:6 windows x64 arch:x64

    2e3e44ac6f091a23ef84e409c0ea9177


    Headers

    Imports

    Sections

  • FPE-AlphaV2/Windows/FangameTale/Binaries/Win64/D3D12/D3D12Core.dll
    .dll windows:6 windows x64 arch:x64

    4928987102696a280994d367bd9459b4


    Headers

    Imports

    Exports

    Sections

  • FPE-AlphaV2/Windows/FangameTale/Binaries/Win64/D3D12/d3d12SDKLayers.dll
    .dll windows:6 windows x64 arch:x64

    3eb6a96335e65dfe300435e4de66f23b


    Headers

    Imports

    Exports

    Sections

  • FPE-AlphaV2/Windows/FangameTale/Binaries/Win64/FangameTale.exe
    .exe windows:6 windows x64 arch:x64

    4b4bf84c78d067004a2b622a29ab7128


    Headers

    Imports

    Exports

    Sections

  • FPE-AlphaV2/Windows/FangameTale/Binaries/Win64/FangameTale.pdb
  • FPE-AlphaV2/Windows/FangameTale/Binaries/Win64/OpenImageDenoise.dll
    .dll windows:6 windows x64 arch:x64

    1eb48a03ab3ca5dae5498445347b5ccf


    Headers

    Imports

    Exports

    Sections

  • FPE-AlphaV2/Windows/FangameTale/Binaries/Win64/tbb.dll
    .dll windows:6 windows x64 arch:x64

    2cff83950926a2b09ef82fe6504f7c60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • FPE-AlphaV2/Windows/FangameTale/Binaries/Win64/tbb.pdb
  • FPE-AlphaV2/Windows/FangameTale/Binaries/Win64/tbb12.dll
    .dll windows:6 windows x64 arch:x64

    46c8e924ddd665228880dd7dd5aa7b91


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • FPE-AlphaV2/Windows/FangameTale/Binaries/Win64/tbbmalloc.dll
    .dll windows:6 windows x64 arch:x64

    81a5262e15e3bb078867e5b439d2a119


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • FPE-AlphaV2/Windows/FangameTale/Binaries/Win64/tbbmalloc.pdb
  • FPE-AlphaV2/Windows/FangameTale/Content/Paks/FangameTale-Windows.pak
  • FPE-AlphaV2/Windows/FangameTale/Content/Paks/FangameTale-Windows.ucas
  • FPE-AlphaV2/Windows/FangameTale/Content/Paks/FangameTale-Windows.utoc
  • FPE-AlphaV2/Windows/FangameTale/Content/Paks/global.ucas
  • FPE-AlphaV2/Windows/FangameTale/Content/Paks/global.utoc
  • FPE-AlphaV2/Windows/Manifest_DebugFiles_Win64.txt
  • FPE-AlphaV2/Windows/Manifest_NonUFSFiles_Win64.txt
  • FPE-AlphaV2/Windows/Manifest_UFSFiles_Win64.txt