7e4e9e8aa278dc8b7e6254256da799f6ff3b2eb6070b37c8c756843500cc02b2

Sharing

Copy URL

Twitter E-mail

General

Target

JaffaCakes118_259f5d8fdeac144b67154ce9c17c6d85
Size

959KB
Sample

241231-s3326szjgj
MD5

259f5d8fdeac144b67154ce9c17c6d85
SHA1

86efc682d861f742c9084de13eb7f708048a9d75
SHA256

7e4e9e8aa278dc8b7e6254256da799f6ff3b2eb6070b37c8c756843500cc02b2
SHA512

4320db04b83dcbe729e378048680ddc1d348be7aeb5de45bd0f9fa51b36e836a8474949bef6a2af273efae8a9de1f64f676bf8d081bafaed604c847deba990d0
SSDEEP

24576:L/x/HrB5d4aE3OyliBOH9coeXy2Yp1diwdty4E31YcgmgjiMAdBwj3:jNrB5CR779Fsy2YTd9q4E3dLguMYBwb

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  Fortnite Skinner Checker V1.9.1/Fortnite Skinner Checker V1.9.1/Bunifu_UI_v1.5.3.dll
- Size
  
  236KB
- MD5
  
  2ecb51ab00c5f340380ecf849291dbcf
- SHA1
  
  1a4dffbce2a4ce65495ed79eab42a4da3b660931
- SHA256
  
  f1b3e0f2750a9103e46a6a4a34f1cf9d17779725f98042cc2475ec66484801cf
- SHA512
  
  e241a48eafcaf99187035f0870d24d74ae97fe84aaadd2591cceea9f64b8223d77cfb17a038a58eadd3b822c5201a6f7494f26eea6f77d95f77f6c668d088e6b
- SSDEEP
  
  6144:SIQpxILDXGGMO7Ice9C5kQw2hWHcHTykhb:SIQpxILDXGGlET9n/cHG
Score

1^/10
behavioral1 behavioral2
- Target
  
  Fortnite Skinner Checker V1.9.1/Fortnite Skinner Checker V1.9.1/Dump/@interface.exe
- Size
  
  173KB
- MD5
  
  8c85d86c5c57873acfc61c62c1f62ed8
- SHA1
  
  38521b3f4633a65c212ecac86c2faafe0fe2c828
- SHA256
  
  c654636e7b52ef9d19a1fdf37e0f1c899ae456188f2171f1bc7163d4fa8fe519
- SHA512
  
  a69f2ed24032e4741db0a020c27f99848d52cb02f67acd215eb837d010778f45b7b597b4c7658f567c289d0b0f209e57976b5388ec6c271e9613b162aae72dac
- SSDEEP
  
  384:Yy0PLg8lys4AgUb3c/NTsRAY73FDVN6UixfAwR8XyrEYzRUPS:Ypg8D4XUbNAi1SUEuXAEYzRU6
Score

7^/10

discovery
- Drops startup file
behavioral3 behavioral4
- Target
  
  Fortnite Skinner Checker V1.9.1/Fortnite Skinner Checker V1.9.1/Dump/Bunifu_UI_v1.5.3.dll
- Size
  
  236KB
- MD5
  
  2ecb51ab00c5f340380ecf849291dbcf
- SHA1
  
  1a4dffbce2a4ce65495ed79eab42a4da3b660931
- SHA256
  
  f1b3e0f2750a9103e46a6a4a34f1cf9d17779725f98042cc2475ec66484801cf
- SHA512
  
  e241a48eafcaf99187035f0870d24d74ae97fe84aaadd2591cceea9f64b8223d77cfb17a038a58eadd3b822c5201a6f7494f26eea6f77d95f77f6c668d088e6b
- SSDEEP
  
  6144:SIQpxILDXGGMO7Ice9C5kQw2hWHcHTykhb:SIQpxILDXGGlET9n/cHG
Score

1^/10
behavioral5 behavioral6
- Target
  
  Fortnite Skinner Checker V1.9.1/Fortnite Skinner Checker V1.9.1/Dump/Fskin.exe
- Size
  
  374KB
- MD5
  
  7de7ab21c58856034ac8baa72760dec8
- SHA1
  
  7a45fa73249ea210e7d61b5bf0e23ed6581410f2
- SHA256
  
  dcf19001c30cde78c5d66aa5df797d6be59a80b2254bdda6468565f0abf1b217
- SHA512
  
  bf1573e3149fee2ea572bfeb9d74b9c8bd3f886d96c1c749cdbe4655f86b85b0a6c67d3e05bd86528f6f9b84fa31a13f822d16cdbdc28848b82613260a6a0799
- SSDEEP
  
  6144:PBhv5UHw1r5931p0dcDM5wkFTYrNeSpBYEzW57HWCZjrTs4xsS6vTNj9I39tg0tp:ZhvCHwjB7NeSpBYES57HWCZjrTs4xsST
Score

1^/10
behavioral7 behavioral8
- Target
  
  Fortnite Skinner Checker V1.9.1/Fortnite Skinner Checker V1.9.1/Dump/Microsoft Windows Protocol Monitor.exe
- Size
  
  9KB
- MD5
  
  61fce223872024b0ecb0bb2a7ffb7c47
- SHA1
  
  f893d620f9d843c8bdb86a0375f856508a6ce136
- SHA256
  
  4b5069b9708a8e97b17af6aa96cf2112877a675b4dbc1f6dbc2601b494b35d11
- SHA512
  
  8926a5f7d6aa862351044d79a634decda989b50ad422ba3e9a97c573ff618a8314607a7afe093925f56d87861eefb31d3820d9e02b1cf2847c0e6072880ac192
- SSDEEP
  
  96:EhFCaDIf/qRxXCaNKP0ZlI4yd89OEC60LZu2UIOwpotu0ljXg2+Pph2UA2vc2gWs:GdIf/Qgac0jI4CEZp0LVUhljXYplwWy
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral10 behavioral9
- Target
  
  Fortnite Skinner Checker V1.9.1/Fortnite Skinner Checker V1.9.1/Dump/Microsoft Windows Protocol Services Host.exe
- Size
  
  10KB
- MD5
  
  7e4ec49968cdfeb455c1f56c5a944287
- SHA1
  
  01a9bc140345909f970e4ef6f7c4efd0ebc0fe09
- SHA256
  
  c68300968c576203725e09edf1ac9b069b903ee06a4321c8c8fe5582898c10e4
- SHA512
  
  61823c4fcb0e3bbab44286215b702a0306984083f4b55347a82671b6393e67522c91269686d910b229781470db79ce4b46a1336a6e6afb077b8fb6f9d9c5094f
- SSDEEP
  
  192:qMy+2mU01aBVHwlPGgnJ7eLHWmY4UpeWdAzc6WO:qMj2maBlNgnYHs/Qc6W
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral11 behavioral12
- Target
  
  Fortnite Skinner Checker V1.9.1/Fortnite Skinner Checker V1.9.1/Dump/xNet.dll
- Size
  
  110KB
- MD5
  
  ac1dceddbc66a1ab7915ac9931f0cfec
- SHA1
  
  22ce2ec96192a520a2a76a0fa272656c77f1041a
- SHA256
  
  cc949931ef9533adced83f3d58862e9732e5db7ad17b5fd4cb9d209a99edb592
- SHA512
  
  3906b3b7f8874bfd79f94e945d857dbc83ec89ed73ac13d49790c7fc4eed5c7e98c99c32ffc4a05795da9981c3163978c7f84a54298e94420e365c395392b3f9
- SSDEEP
  
  3072:PqCUxh+3H0MznY3wihz0YmcTqnV+xnEdU:PqCUxhfMUTqnV+xnEd
Score

1^/10
behavioral13 behavioral14
- Target
  
  Fortnite Skinner Checker V1.9.1/Fortnite Skinner Checker V1.9.1/Fort Skinner.exe
- Size
  
  171KB
- MD5
  
  962d1cf369e33fc38499c2c8afa1d8f5
- SHA1
  
  2a5ca50fa47f18c73b86679f0c42a7212cefcc59
- SHA256
  
  6d69383019f0ccaf52e5718fc67a4122b3d1579f34bde6d644c418e231b5c44b
- SHA512
  
  958a212f61038dfbe75ac7235dbcd3709be389a5d16de14db2bb2cd59c2a9cbef357b05a804b8e127300238add31b5ba088b59cb35f468b7fb7c0639f84845c8
- SSDEEP
  
  3072:lEb8B5KNoVZ9iucKcuZPnXHTgBz9s7QKTUs6:eb6zNcKcgPzm9sd
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
behavioral15 behavioral16
- Target
  
  Fortnite Skinner Checker V1.9.1/Fortnite Skinner Checker V1.9.1/xNet.dll
- Size
  
  110KB
- MD5
  
  ac1dceddbc66a1ab7915ac9931f0cfec
- SHA1
  
  22ce2ec96192a520a2a76a0fa272656c77f1041a
- SHA256
  
  cc949931ef9533adced83f3d58862e9732e5db7ad17b5fd4cb9d209a99edb592
- SHA512
  
  3906b3b7f8874bfd79f94e945d857dbc83ec89ed73ac13d49790c7fc4eed5c7e98c99c32ffc4a05795da9981c3163978c7f84a54298e94420e365c395392b3f9
- SSDEEP
  
  3072:PqCUxh+3H0MznY3wihz0YmcTqnV+xnEdU:PqCUxhfMUTqnV+xnEd
Score

1^/10
behavioral17 behavioral18

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops startup file

Checks computer location settings

Checks computer location settings

Checks computer location settings

Drops startup file

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18