General

  • Target

    FortniteCheat.exe

  • Size

    45KB

  • MD5

    911fe21c2b8ecf36fd551ba48a2261b1

  • SHA1

    5a8eda4aef6924b111a4e90ceab86c61f6f11d34

  • SHA256

    0b8689cf0093d5f1a0be894bac61050884db288676e4362716a6e215ac827468

  • SHA512

    01cdeccc00cbb16b444300198985e1a6237d73efb9ce211bf1c52e5608fde40f6b0aa485d1b2e9252e3f955a3d9c18237184c9734fab08b76baf0fe1308389df

  • SSDEEP

    768:2S4yVO+lq6Vnn9ej4cb1UrW4t82vJ6lEbFEPG9pHGu6vOChHzYi34e:2S4Gjlq6TecA1UKhEF19VGu6vOCV5oe

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

147.185.221.22:11860

Mutex

8YzGx35Q5ExHCG7f

Attributes
  • Install_directory

    %LocalAppData%

  • install_file

    Windows Host Proccess.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • FortniteCheat.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections