Overview

overview

7

Static

static

3

ICE_Mod_Fortnite.exe

windows7-x64

7

ICE_Mod_Fortnite.exe

windows10-2004-x64

7

cstealer.pyc

windows7-x64

3

cstealer.pyc

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    ICE_Mod_Fortnite.exe

  • Size

    16.2MB

  • Sample

    240604-yf3e1sab26

  • MD5

    dbd8ea3304e2baf7da2b98d1c8867317

  • SHA1

    ecf38e92f6c94505444c6c343395b1a0d857c66e

  • SHA256

    80956ce29d07d135064da2a050eb6b84928d924d6906961be9d566b9bb447580

  • SHA512

    e7ecc9a38f66695f10840c86da749334ab7356af4a1569d9e4ad2c9feee8267977bdd826ccf428a85020d04818ef1430955538e031417e043264999b2887f39d

  • SSDEEP

    393216:CEkcq9r9JWQsUcR4NzK1+TtIiFvY9Z8D8Ccl6livSI8EewnchSfK:Ckur9YQFS1QtI6a8DZcIl6CPwVK

Score
7/10
pyinstallerspywarestealer

Malware Config

Targets

    • Target

      ICE_Mod_Fortnite.exe

    • Size

      16.2MB

    • MD5

      dbd8ea3304e2baf7da2b98d1c8867317

    • SHA1

      ecf38e92f6c94505444c6c343395b1a0d857c66e

    • SHA256

      80956ce29d07d135064da2a050eb6b84928d924d6906961be9d566b9bb447580

    • SHA512

      e7ecc9a38f66695f10840c86da749334ab7356af4a1569d9e4ad2c9feee8267977bdd826ccf428a85020d04818ef1430955538e031417e043264999b2887f39d

    • SSDEEP

      393216:CEkcq9r9JWQsUcR4NzK1+TtIiFvY9Z8D8Ccl6livSI8EewnchSfK:Ckur9YQFS1QtI6a8DZcIl6CPwVK

    Score
    7/10
    spywarestealer

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

    • Target

      cstealer.pyc

    • Size

      67KB

    • MD5

      ad0492a222956db980daa4e5449226f9

    • SHA1

      417bc557da6c95e6d5e020a4ab73d6060346d236

    • SHA256

      b13a667128e2fdf35a0b4cfd267e24a606c09e99a4b5094829c4f7a2d5d672c6

    • SHA512

      d0dba4b06fe7aa4dac6b98e718bff87212e011f3584da311db3f4a4f309d4b809cb5e551c9be6c852b24b60b65cae7206ea3b518df48bb8b8c4c4018338f35dd

    • SSDEEP

      1536:l0xqOgDxpqBJlMstbo88jLQwcXf9qS0VL+LRheG:lqE/+bo88PCXX0L+LRP

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks