Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

04/12/2024, 20:25

241204-y7kz2szkc1 10

General

  • Target

    UdFortniteCheat.exe

  • Size

    45KB

  • MD5

    4f4a8f5848aa78ac7aa1fef6ca2e500c

  • SHA1

    ae4111ea85f9eb3c8c21d496b87b857cc7fd25ea

  • SHA256

    0ffb34993a5b11563fe9df89c9fcd267d804f6d87130192c12dca02cf4b11a55

  • SHA512

    ba93e1820b00ab4c0194f0148868fd2224187d8e4ae17d08341ad19013425240bc5d6f1ebb274870f6a1211a40766b4ac7b7470496f77216dc6d06e5305adde0

  • SSDEEP

    768:edhO/poiiUcjlJInpFH9Xqk5nWEZ5SbTDakWI7CPW5D:ow+jjgn3H9XqcnW85SbTFWIr

Score
10/10

Malware Config

Extracted

Family

xenorat

C2

127.0.0.1

Mutex

Fn Cfo

Attributes
  • delay

    5000

  • install_path

    nothingset

  • port

    4444

  • startup_name

    needed for fortnite

Signatures

  • Detect XenoRat Payload 1 IoCs
  • Xenorat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • UdFortniteCheat.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections